Security & Privacy

Key Principles

• User-consented access: Financial data is accessed only after explicit authorization by the individual.
• Read-only connections: We do not support money movement, transfers, or account changes.
• No credential storage: Bank login credentials are never stored or visible to IncomeChecker.
• Minimal data use: Data is used solely to generate an income verification report.
• View-only reports: Raw transaction data cannot be downloaded or exported.
• Restricted access: Access to systems and data is limited by role and purpose, and is monitored.

Data Handling

Data is protected using secure infrastructure and modern security practices. Access is restricted based on role and purpose, and data is retained only as long as necessary to operate the service and meet legal obligations.

Technical Safeguards

• Encryption: Data is encrypted at rest with AES-256 and in transit with TLS 1.3.
• Tokenized bank access: Bank connections run through Plaid using a read-only token. The token is deleted as soon as the transaction data has been fetched.
• Masked account numbers: Reports show only the last four digits of any account number.
• Row-level security: Every database table enforces access rules so users can only reach their own records.
• Audit logging: Significant actions, such as creating, viewing, and deleting reports, are logged.
• Rate limiting: API endpoints are rate limited to slow down abuse and automated attacks.

What We Can and Cannot See

When someone connects their bank, we receive read-only transaction data: dates, amounts, descriptions, and account balances, covering up to 12 months. That is what the income analysis runs on.

We never see the bank username or password. That sign-in happens inside Plaid's window, directly with the bank. We cannot move money, make payments, or change anything on the account, and full account numbers are masked down to the last four digits.

One-Time Access, Not an Ongoing Connection

Each report uses a single data pull. As soon as the transactions are fetched, the bank access token is deleted, so we have no standing access to the account afterward. A new report requires the account holder to connect again and give permission again.

What the Person Requesting the Report Sees

The landlord, lender, or other requester sees an income report: estimated monthly income, detected recurring deposits, and related summaries. They do not get the bank login, and they cannot download or export the raw transaction data.

No Credit Check

Connecting a bank account through IncomeChecker.com does not pull a credit report and does not affect a credit score. The analysis uses transaction data only, not credit bureau records or employment records.

Your Data Rights

You can export a copy of your account data or permanently delete your account and its reports from your settings at any time. Deletion removes your data from the application database rather than just hiding it.

Responsible Disclosure

If you believe you've identified a security vulnerability, please contact us at security@incomechecker.com.

We investigate all good-faith reports and do not pursue legal action against responsible security researchers.