Effective Date: July 2026 • Version 1.0
Every table in Postgres is guarded by Supabase RLS. Queries strictly evaluate `auth.uid() = user_id`, guaranteeing cross-tenant isolation.
All communications between your browser, Next.js application servers, and database clusters are encrypted via TLS 1.3.
WealthLoop does not store or request your bank login passwords or debit card PINs. Account linking via screenshot processes visual numeric balances directly from your uploaded images using secure AI parsing.
If you discover a security vulnerability, please contact security@wealthloop.app for immediate triage by our engineering team.