Read-only SMS AI agent

Security is a product boundary.

Buddy is designed to explain authorized financial data through SMS, not control money. BankTalker has no transfer, payment, trade, bill-pay, card-control, or withdrawal capability.

Selected-account access

Users choose which supported accounts may be read. Bank login credentials stay with the financial connectivity provider. BankTalker stores encrypted provider tokens and normalized financial records needed for the service.

Verified communication

Financial information is eligible for delivery only through a verified phone with current channel consent, active entitlement, and server-side authorization. Provider signatures are checked before webhook data is trusted.

AI is not the ledger

Deterministic calculation engines remain authoritative for balances, budgets, bills, affordability, and safe-to-spend results. The AI layer interprets natural language and explains allow-listed tool results; it cannot invent or directly mutate financial records.

Responsible disclosure

Security questions or reports may be sent to [email protected]. Do not include live credentials, tokens, or customer financial data in an initial report.