Security and permissions

When you connect an AI assistant to guito, it’s natural to want to know what it can see and do. This page explains the limits of the access you grant.

​

The assistant never sees your credentials

The connection is made over OAuth, the same standard you use when you sign in to one service through another: you’re sent to guito, you sign in to your account, and you authorize access.

​

Access only to your own data

The authorization is tied to your account: the assistant can only see and change your own data, never anyone else’s.

​

Changes always require confirmation

By default, the assistant only queries and analyzes your data. Write operations, such as logging a transaction, creating a manual account, goal, credit, property, or recurring item, or allocating to a goal, follow a different model: the assistant prepares the change but does not save it right away. Before any write, the assistant presents a summary of what it’s about to do and waits for your decision. Nothing changes in your data until you approve; if you cancel, the change is discarded.

​

Per-user usage limits

To protect your account from misuse, actions through the assistant are subject to per-user usage limits. If an assistant makes too many requests in a short period, the excess requests are declined. It’s a safeguard that keeps access predictable and safe, without affecting normal use.

​

Activity log

Every change made through an assistant is recorded in an internal log tied to your account. That record covers the actions taken on your behalf — the changes and the queries alike — is never shared, and does not store the answers: a query leaves a note that it happened and when.

​

Not financial advice

The assistant describes and organizes your information factually. It does not recommend or evaluate specific financial instruments. The data and tools help you understand your finances; the decisions are always yours.

​

Learn more