> ## Documentation Index > Fetch the complete documentation index at: https://docs.guito.pt/llms.txt > Use this file to discover all available pages before exploring further. # Security and permissions > How OAuth access, permissions and limits keep your data safe. When you connect an AI assistant to guito, it's natural to want to know exactly what the assistant can see and do. This page explains the layers that protect your information: the assistant never sees your credentials, it can only reach your own data, it asks for your confirmation before any change, it's subject to usage limits, and every action is recorded in a log you can review. ## The assistant never sees your credentials The connection is made over OAuth, the same standard you use when you sign in to one service through another. When you connect the assistant, you're sent to guito, you sign in to your account, and you authorize access. From then on, the assistant only ever receives an access authorization issued by guito. Your username and password are never shared with the assistant. It never sees or stores your credentials: it only receives the authorization you granted inside guito, and that authorization can be revoked at any time. ## Access scoped to your own data The authorization the assistant receives is tied to your account. Every request, whether it reads or writes, can only touch data that belongs to you: your accounts, investments, transactions, goals, credits and properties. There is no way for the assistant to reach anyone else's data. ## Changes always require confirmation By default, the assistant only queries and analyzes your data. Write operations, such as logging a transaction, creating a manual account, a goal, a credit, a property or a recurring entry, or allocating to a goal, follow a different model: the assistant prepares the change but does not save it right away. Before any write, the assistant presents a summary of what it's about to do and waits for a decision. That confirmation happens in the assistant itself, under the control of whoever is using it. Nothing changes in your data until the change is approved; if it's canceled, it's simply discarded. That's why an instruction like "log a 30 euro grocery expense" never writes anything without an explicit approval in between. No change is saved without your explicit approval in the assistant. The assistant never moves money or executes payments or transfers, it only records and organizes your financial information. ## Per-user usage limits To protect your account from misuse, actions through the assistant are subject to per-user usage limits. If a client makes too many requests in a short period, the excess requests are declined. It's a safeguard that keeps access predictable and safe, without affecting normal use. ## Action log Every action carried out through an assistant is recorded in a log tied to your account. That record lets you track what was queried and changed on your behalf, and only you can read your own entries. ## Not financial advice The assistant describes and organizes your information factually. It does not recommend or evaluate specific financial instruments. The data and tools help you understand your finances; the decisions are always yours. ## Learn more An overview of how to connect an external assistant to guito. Step by step to connect Claude, ChatGPT and other clients. Hide monetary values on screen when you're in public places. What to do if the connection fails or the assistant doesn't respond.