A product that reads your bank has to earn it.

How your accounts connect

You connect a bank or card through Plaid, an accredited channel that hands Naxcol read-only access to your transactions. Naxcol never sees your bank password and never logs into your bank as you. No credential scraping, in either country.

You can disconnect any account at any time. Naxcol stops pulling from it immediately and keeps only the history it already gathered, which you can delete along with your account.

What Naxcol holds, and how

Your transactions, the recurring charges found in them, the decisions you make, and the cards you make. All of it is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256).

Card numbers are never stored by Naxcol. Cards are issued through a partner that tokenises them, so the full number never sits on our systems.

Data for Canadian customers is held in Canada.

What Naxcol never does with your data

Never sold. Never shared with advertisers, affiliates or lead-generation partners. Never used to steer you toward a product that pays us. A keep-or-cut call is made on your numbers and nothing else.

What Naxcol does keep, and improve, is knowledge about merchants: how a company bills, what it has charged over time, how it is cancelled, and whether a card block stops it. That is knowledge about companies, built from everyone who uses Naxcol, with nothing in it that points back to you.

Your rights

You can export everything Naxcol holds about you, and you can close your account and have it deleted. Closing your account ends every bank connection and closes every card. Records that financial rules require us to keep are kept for the period those rules set, and you are told what and for how long before you close.

Naxcol follows PIPEDA and Quebec Law 25 in Canada, and the obligations that come with issuing cards through a licensed partner in both countries.