Security

Solve by QuanFi is designed read-only: we analyze statements and transactions you provide. We do not store bank login credentials for DIY upload, and we do not execute payments or account changes. See our Privacy Policy for what we collect and how long we keep it.

Access control

• Row-level security on database tables — your data is scoped to your user ID
• Private storage buckets for statements, avatars, and receipts
• Server-only API keys for OCR, email, and billing — never exposed to the browser
• Session-based authentication via Supabase Auth

Human confirmation

Outbound actions (exports, recovery status updates, subscription flags) require your explicit click. AI assists with reading and explanations; it does not send communications or cancel services for you.

Reporting issues

If you believe you have found a security issue, contact support@quanfi.app with details. We investigate reports promptly.