Know exactly where your money
is going.

Compass uses Plaid, a regulated financial data aggregator, to securely connect to your bank. Plaid handles the authentication directly with your bank. Compass never sees, stores, or has access to your banking login credentials.

No. Compass has read-only access to your account data. It can see your balances and transactions, but it cannot initiate payments, transfers, or any changes to your accounts. This is enforced at the Plaid integration level.

Plaid is a SOC 2 Type II certified financial infrastructure provider used by thousands of financial applications. If Plaid experienced an incident, your bank credentials would not be exposed because Plaid tokenizes access. Compass would lose the ability to sync new data until the connection is re-established, but no stored credentials would be at risk because Compass does not store them.

Compass stores your transaction history (merchant names, amounts, dates, categories), account balances, and account metadata (account type, institution name). It does not store your bank login credentials, full account numbers, or routing numbers. Account numbers are truncated to the last four digits for display purposes only.

We keep your information for as long as your account is active and you're using our services. If you delete your account, your personal information is removed from our systems, and records confirming that deletion are retained for a minimum of two years, as required under Canadian privacy law.

Yes. You can request an export of your data at any time, and you can delete your account and associated data. Deletion cascades through all systems that hold your personal information.

Compass uses Google's Gemini AI models for two things: automatically categorizing transactions and powering the Compass Guide chat assistant. Your raw banking data, including account numbers, institution names, and identifying details, is never sent to the AI. Instead, the AI works from abstracted summaries, like "grocery spending trends over the past 6 months," not "Account #12345 at Bank X." Your financial data is never used to train AI models, and it's never shared with AI providers for any purpose beyond generating your insights in that moment.

For transaction categorization, the AI sees a normalized merchant name and an amount, nothing else. For the Compass Guide assistant, the AI works from aggregated, de-identified spending summaries you've chosen to discuss, not raw transaction lists or account identifiers. The AI cannot access your account numbers, login credentials, or any information that could identify your specific bank or account.

Yes. AI categorization and the Compass Guide assistant are conveniences, not requirements. You can categorize transactions manually via user rules and use Compass without ever engaging the AI assistant.

One connection (or "institution") means one login session with a single bank or brokerage, regardless of how many individual accounts you have there. For example, if you have a chequing account, a savings account, and a TFSA all at the same bank, connecting that bank counts as one connection. If you also have an RRSP at a separate brokerage, that's a second connection.

Compass is built specifically for Canadian data sovereignty and is designed to comply with PIPEDA, Canada's federal private-sector privacy law. This governs how we collect, use, disclose, and safeguard your personal information, regardless of where the underlying infrastructure is hosted.