Account security

We have a strong focus on providing our users with both privacy and security. We keep the information we collect to a minimum, and your data is never shared with undisclosed third parties. We use a small number of service providers to run Synci, such as Laravel Nightwatch to monitor errors and Featurebase for support. If you consent to it, we also use PostHog (EU-hosted) for product analytics and session replays; without your consent, we only collect anonymous usage events that can't be tied to you. All text in session replays is masked, so your financial data never appears in them. You can find a list of all the third parties we use in our privacy policy: https://synci.io/privacy

Your financial data is never shared with any party outside of Synci, except for those explicitly stated:

• The connectivity provider behind each of your connections: GoCardless for banks in Europe and the UK, Akahu for banks in New Zealand, and SnapTrade for brokerages and crypto exchanges.

• Destinations you link your accounts to, like YNAB, Lunch Money, Google Sheets or Notion.

• Third-party apps and AI assistants you authorize, limited to the accounts and permissions you approve. See Managing third-party apps and AI assistants.

• SimpleFIN apps you connect, such as Actual Budget.

• Any webhook endpoint you have created and enabled.

• Our enrichment provider, if you turn on transaction enrichment for an account (available on the Pro plan). By default this is Ntropy, using its EU processing endpoint. You can instead choose the legacy OpenAI (Azure) option, which is processed by Microsoft Azure AI Foundry in Sweden and is not used to train models. We only send the minimum transaction data needed, with an internal reference and never your name or email. Transactions from New Zealand banks already arrive enriched by Akahu. We recommend reading the Synci Privacy Policy and the Azure Direct Models Privacy Policy before enabling AI-powered features.

To make sure your account and data is secure, we recommend using a strong password that has not been used elsewhere. Password managers like Apple Passwords, 1Password, or Bitwarden are essential these days, and we heavily recommend using one.

We also recommend enabling two-factor authentication (2FA) and passkeys. This ensures that even if someone is able to steal your password, they will not be able to access your account without your authenticator. Open Settings from the user menu at the bottom of the sidebar, then go to Security > Two-factor authentication to enable 2FA, or Security > Passkeys to add a passkey.

Recovery codes

When you enable 2FA, Synci gives you a set of recovery codes. They let you sign in if you lose access to your authenticator, and each code can only be used once, so save them somewhere safe, like your password manager. You can view them again any time with Show recovery codes under Security > Two-factor authentication. If you think your codes have been exposed, click Regenerate: your old codes stop working and you get a new set.

Managing your account

Everything below lives in Settings, which you open from the user menu at the bottom of the sidebar.

Changing your email address

Go to Account > Profile, enter your new address in the Email field and save. To protect your account, the change takes two steps: we send a confirmation link to your current address to approve the change, and a verification link to your new address to prove you own it. Your email changes once you've clicked both. Until then, you can stop the change with Cancel email change.

Notifications

Under Notification settings, you choose what Synci tells you about and how: by Email, In-app, both or neither. Topics include connection expiry, connection problems, linked account interruptions, rules and transaction alerts, subscription and plan changes, and connected app activity. Essential messages, such as sign-in codes, password resets and subscription confirmations, are always sent by email. Product update emails are managed separately, under Account > Profile.

Financial data retention

Under Privacy & data > Financial data retention, you decide how long Synci keeps your financial history. You can choose anything from 7 days up to your plan's limit (60 days on Basic, 730 days on Pro), and new Synci accounts start at 30 days. Transactions, balances and related logs older than your setting are deleted automatically. Read more in Data retention.

Deleting your account

To close your Synci account, go to Privacy & data > Delete account and type DELETE to confirm. All of your resources and data are permanently deleted, and an active subscription is cancelled automatically. This can't be undone.

Sharing your account

You are ultimately responsible for your account's security and data. Anyone who can sign in to your Synci account can see the financial data in it, so we strongly recommend enabling 2FA.

If you do not have a partner agreement with Synci, you can not share your account for commercial purposes, or in any way accept payment in return for sharing your account. See our Terms of Service.