Yes, when you click to connect account, you will see a third party popup. This is securely connected to our website through a 256-bit encrypted connection. This is the same kind of encryption banks use when you enter your username and password to login on their website.
We never ever see/store your credentials. They don't even touch our serves, they directly go through the encrypted connection to the third party API and we receive your transaction level data directly from the bank (read-only).
Just to be clear that if our site gets hacked, your credentials won't be compromised because we never saw them or store them (they never touched our servers).
We cannot change anything on your account, we can't deduct funds, or do anything else. The data we get is only for analytics and to help give you a lower rate. If you do not connect your primary bank account, your application is considered incomplete and is not reviewed for a loan decision.
Since inception, we've given millions of dollars in loans to immigrants from 50+ different nationalities and each one of them has gone through the same process.
We understand that you may have additional questions regarding how it works - feel free to reach out to us at firstname.lastname@example.org.