Your Security is Our Priority
We use bank-level security measures to protect your financial data and privacy.
Bank-Level Security, Zero Compromises
Your financial data is encrypted end-to-end and stored securely. We only access the banking emails you authorize, and we never see your bank passwords or login credentials.
How We Protect Your Data
256-bit SSL Encryption
All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
Encrypted Data Storage
Your data at rest is encrypted using AES-256 encryption, the same standard used by banks and government agencies.
OAuth 2.0 Authentication
Gmail access is secured via Google OAuth 2.0. We never see or store your Gmail password.
Read-Only Access
Our Gmail integration has read-only permissions. We can never modify or delete your emails.
SOC 2 Compliance
Our infrastructure providers are SOC 2 Type II certified, ensuring rigorous security controls.
Regular Security Audits
We conduct regular security audits and penetration testing to identify and fix vulnerabilities.
Gmail Integration Security
Read-Only Access
We only request read-only permissions from Google. This means we can view your emails but cannot delete, modify, or send emails on your behalf.
Selective Scanning
Our AI only scans emails that match bank transaction patterns. Personal emails, newsletters, and other correspondence are completely ignored.
OAuth 2.0 Standard
We use Google's industry-standard OAuth 2.0 protocol. This means authentication happens directly with Google, and we never see or store your Gmail password.
Easy Revocation
You can revoke Antimony's access to your Gmail at any time through your account settings or Google Account permissions. Access is immediately terminated upon revocation.
Secure Infrastructure
- • Cloud hosting with 99.9% uptime SLA
- • Redundant backups across multiple regions
- • DDoS protection and firewall security
- • Automated security patching
- • Real-time threat monitoring
Compliance & Audits
- • GDPR-compliant data practices
- • SOC 2 Type II certified infrastructure
- • Regular third-party security audits
- • Penetration testing by security experts
- • Incident response plan in place
Security Best Practices for Users
Use a Strong Password
Create a unique, complex password with at least 12 characters, including letters, numbers, and symbols.
Enable Two-Factor Authentication
If available, enable 2FA on your Google account for an extra layer of security.
Keep Your Email Secure
Since we access your Gmail, ensure your email account is secure and monitor it for suspicious activity.
Log Out on Shared Devices
Always log out after using Antimony on public or shared computers.
Review Permissions Regularly
Periodically review the apps connected to your Google account and revoke access for unused apps.
Report Suspicious Activity
If you notice any unauthorized access or suspicious activity, contact us immediately.
Security Questions Answered
Can Antimony see all my emails?
No. While we have read access to your Gmail account, our system only scans for emails that match bank transaction notification patterns. We ignore all personal correspondence and non-financial emails.
Do you store my Gmail password?
Absolutely not. We use Google OAuth 2.0, which means authentication happens directly with Google. We never see, request, or store your Gmail password.
Can Antimony delete or modify my emails?
No. Our Gmail integration has read-only permissions. We cannot delete, modify, move, or send emails from your account.
What happens if there's a data breach?
While we implement robust security measures to prevent breaches, if one were to occur, we would immediately notify affected users, conduct a thorough investigation, and take steps to prevent future incidents.
How can I revoke Antimony's access to my Gmail?
You can revoke access at any time through your Antimony account settings or through your Google Account permissions page. This will immediately stop our access to your Gmail.
Is my financial data shared with third parties?
We do not sell your data. We only share data with essential service providers (like payment processors) who are bound by strict confidentiality agreements. See our Privacy Policy for details.
Responsible Security Disclosure
If you discover a security vulnerability in Antimony, we appreciate your help in disclosing it to us responsibly. Please report security issues to:
security@antimony.com.ngWe commit to acknowledging your report within 48 hours and working with you to address the issue promptly.
Still Have Security Questions?
We're here to address any concerns you have about your data security and privacy.