For most people, bank and credit card statements sit unread in their email inboxes. Fetching them manually, typing passwords, downloading PDFs, and entering transactions into a spreadsheet is a tedious workflow that quickly leads to tracking fatigue.
By automating this ingestion process using secure Google OAuth, you can sync all your monthly statements directly from your email to your dashboard in seconds.
Ingestion Flow: From Email to Ledger
Our automated ingestion pipeline runs in four highly-optimized steps:
- Secure Google Authentication: Link your Gmail account securely using OAuth 2.0. The app only requests restricted read-only access to search messages.
- Filtered Sweeping: The sync engine sweeps messages from the last 60 days using a precise negative filter (excluding brokerages and mutual funds) to index only valid bank and credit card statements.
- Lightweight Password Checking: Locked statements are tested in-memory against saved passwords in under 10ms without performing any heavy parsing.
- Dynamic Account Routing: The system automatically classifies statements (e.g. creating distinct accounts like 'ICICI Bank' and 'ICICI Credit Card') and imports transactions seamlessly.
Security and Privacy Safeguards
Automating email access requires a strict, zero-trust approach to data privacy. Our engine is built with the following parameters:
- Zero-Retention File Policy: Uploaded statements are processed entirely in-memory (RAM) and deleted immediately. No raw statement files are ever stored on our servers.
- Personally Identifiable Information (PII) Redaction: Before any transaction text is processed, a sanitization scrubber automatically redacts names, account numbers, CIF codes, email addresses, and phone numbers.
- AES-256-CBC Encryption: Password-protected statements are unlocked using keys that are encrypted at rest with a random Initialization Vector (IV) and a server-side secret key.
Automating your statement imports takes the effort out of tracking, giving you a real-time, consolidated view of your financial health without compromising your security.