Security and permissions

When you connect an AI assistant to guito, it’s natural to want to know what it can see and do. This page explains the limits of the access you grant.

​

The assistant never sees your credentials

The connection is made over OAuth, the same standard you use when you sign in to one service through another: you’re sent to guito, you sign in to your account, and you authorise access.

​

Access only to your own data

The authorisation is tied to your account: the assistant can only see and change your own data, never anyone else’s.

​

Review changes in your assistant

The connector can record and edit information in guito, such as transactions, manual accounts, goals, loans, properties and recurring payments. These tools are marked as write operations so your assistant can ask for approval before calling them. Your assistant controls that approval step. Check its tool permissions and review the account, amount and date before allowing a change. When the assistant calls a write tool, guito saves the change immediately; there is no second confirmation inside guito. A client that skips approval can therefore save changes without asking you again.

​

Data shared with your assistant

Depending on your request, the connector returns information about your accounts and balances, transactions, spending, investments, goals, loans, properties or recurring payments. That information is then handled by your assistant’s provider under its own privacy policy and settings, which may include model training. Disconnecting stops future access; it does not delete information already received by that provider. See the privacy policy for details on data handling and retention.

​

Per-user usage limits

To protect your account from misuse, actions through the assistant are subject to per-user usage limits. If an assistant makes too many requests in a short period, the excess requests are declined. It’s a safeguard that keeps access predictable and safe, without affecting normal use.

​

Activity log

Every change made through an assistant is recorded in an internal log tied to your account. That record covers the actions taken on your behalf — the changes and the queries alike — is never shared, and does not store the answers: a query leaves a note that it happened and when.

​

Not financial advice

The assistant describes and organises your information factually. It does not recommend or evaluate specific financial instruments. The data and tools help you understand your finances; the decisions are always yours.

​

Learn more