HTTPS connections
ProsperSync is served over HTTPS. This protects data in transit between a compatible browser and the service; it is not a claim about a particular at-rest encryption standard.
Trust center
Security and data controls, explained
A plain-language view of the controls ProsperSync implements today, what each one covers, and where their limits begin.
Last reviewed July 28, 2026
Controls implemented today
These layers work together. No single control or vendor eliminates every security risk.
Authenticated request checks
Application requests that access account data use authenticated checks. Authentication is one layer and does not replace the database boundaries below.
Database access policies
ProsperSync uses Supabase database access policies (RLS) alongside authenticated application checks to scope access to account and household data.
Verified data requests
Authenticated users can start data export and account deletion requests in account settings. Requests are verified before fulfillment.
Scope and limitations
The boundary matters
What these controls cover
They reduce the risk of unauthorized access by adding connection, authentication, and database boundaries around account data.
What this page does not claim
ProsperSync does not assert a security certification, a regular audit cadence, a specific at-rest encryption algorithm, or an absolute security guarantee here.
How to report a concern
If you believe your account or data may have been exposed, contact privacy@prospersync.com so the concern can be investigated.
Export and deletion request paths
Account settings provide the starting point for data export and account deletion. The Privacy Policy explains verification, retention, and legal limitations in more detail.
1. Start in account settings
Authenticated users can initiate a data export or account deletion request from the account area.
2. Verify the request
Requests are reviewed and identity may need to be verified before financial records are exported or an account is deleted.
3. Apply retention boundaries
Deletion may not remove anonymized, aggregated, backup, security, fraud-prevention, tax, accounting, or legally required records.
Questions people ask
How does ProsperSync restrict access to account data?
ProsperSync combines authenticated application checks with Supabase database access policies (RLS) that scope access to account and household data.
Can I export my data or request account deletion?
Yes. Authenticated users can start both request types in account settings. ProsperSync verifies requests before fulfillment, and retention limitations are described in the Privacy Policy.
Does ProsperSync guarantee absolute security?
No. No online service can guarantee absolute security. This page describes current controls without claiming a certification, audit cadence, or specific at-rest encryption standard.
Where can I report a privacy or security concern?
Email privacy@prospersync.com from the address associated with your account and describe the concern without sending passwords or unnecessary financial details.
Review the policy behind the controls
Read how ProsperSync describes data collection, use, requests, retention, and security limitations.
The current Privacy Policy is published in English.