Privacy

Passbook is operated by Union Street Studios LLC. Passbook exists to hand your own financial data back to you, through the AI agents you choose. This page explains exactly what that involves.

What we collect

When you connect a bank, you sign in through Plaid. Your bank username and password go to Plaid and your bank, never to us. Plaid then gives us access to your account names, balances, transactions, and investment holdings. We store that data so your agent can query it quickly and so you keep history beyond what your bank provides.

We don’t ask for your name, email address, or phone number. You sign in with a passkey, which stays on your device, and your agent reads your data with your private Passbook URL. We keep standard server logs, such as request times and error messages, to keep the service running.

How we use it

We use your financial data for one thing: answering requests made with your Passbook URL. We don’t sell it, rent it, use it for advertising, or use it to train AI models.

Your agent

When you paste your Passbook URL into an AI agent, that agent requests your data and its provider receives what it requests. Anthropic, OpenAI, Cursor, or whoever runs your agent handles that data under their own privacy policy. You decide which agents get your URL, and you can cut every one of them off at once by getting a new URL from your dashboard.

Who else sees it

Plaid, which connects to your bank. Their end user privacy policy covers how they handle your data. Vercel, which hosts Passbook, and Neon, which runs our database. We share data with authorities only when the law requires it.

Security

All traffic uses TLS. Bank access tokens are encrypted with AES-256-GCM before they’re stored. Your Passbook URL is stored only as a one-way hash, so we can’t recover it, and neither could anyone who stole our database. Passbook has read-only access and can’t move money.

Keeping and deleting data

We keep your data while your account is active. When you remove a bank, we revoke our access at Plaid and delete its accounts, transactions, and holdings right away. When you delete everything, we do that for every bank and delete your account. Database backups age out within 30 days.

Contact

Questions or deletion requests: ben@unionst.com.