Aggregate Finance

Security

How we protect your financial data.

What we can reach, how your data moves from your bank to your files, how your account is protected, and how you can withdraw our access.

What Aggregate Finance can do

  • Read transactions, balances and credit limits
  • Read statement balances, due dates and minimum payments
  • Create a Google Sheet, or use one you already have
  • Keep an Excel workbook in its own OneDrive folder
  • Update the tabs we created, never your own

What Aggregate Finance can never do

  • Move money, pay a bill or change an account
  • See your bank username or password
  • Open any other file in your Google Drive or OneDrive
  • Sell your data or use it for ads
Your bank

You sign in with your bank directly, never with us.

Plaid

Checks your sign-in and gives us read-only access.

Aggregate Finance

Encrypts your data with a key unique to your account.

Files you own

Your Google Sheet, Excel workbook and downloads.

Account protection

Protecting your account.

  • Two-step verification on every account. A passkey or an authenticator app, plus recovery codes.
  • New sign-in alerts. We email you when a browser we haven’t seen signs in.
  • Every session, listed. Sign out any browser from your Account page.

Sharing

Share your spreadsheet. Google keeps the list.

  • Google sends the invitation. Sharing from the dashboard uses Google’s own sharing. We don’t keep a list of who you share with.
  • Confirm it’s you first. Sharing, or letting someone edit, needs two-step verification, and we email you each time.
  • Editors can’t reshare your spreadsheet. Only you, as the owner, can invite more people.
  • Stop sharing at any time. Remove a person from your dashboard or in Google Sheets. Disconnecting Google Sheets or closing your Aggregate Finance account doesn’t remove anyone, because the spreadsheet is your file in your Google Drive.

Your control

Remove our access at any time. Your data stays yours.

  • Remove a bank. We disconnect the bank through Plaid and delete the bank’s access token, so Aggregate Finance can no longer read your accounts at the bank you removed. Transactions already synced stay in your spreadsheet.
  • Disconnect Google Sheets or OneDrive. We remove our access to your Google account and OneDrive. Your files stay where they are.
  • Close your account. We disconnect your banks, remove our access to your Google account and OneDrive, and delete your data and its encryption key. Backups become unreadable within 14 days.