Security
How we protect information in Good Grief
This page explains how Good Grief limits access, encrypts data, and handles privacy. It is for customers, partners, and reviewers who need those answers in one place.
Access and sign-in
Production access is limited and reviewed monthly. People sign in to Good Grief before they can connect a financial account.
Production access
Our Chief Technology Officer controls access to production systems and reviews it every month.
Staff sign in with an existing work login, such as Google Workspace or GitHub.
They then confirm with multi-factor authentication, a second check besides the password. A password manager stores the login details.
When someone leaves, we revoke their credentials immediately. We have no physical office. Production systems are cloud-hosted.
Sign-in before connecting an account
People sign in with a username and password or single sign-on before using the application.
We do not currently require a second factor on customer accounts before the screen to connect a financial account appears.
We plan to add a texted one-time code for that step.
Staff access to critical systems
Employees and contractors must use multi-factor authentication on every tool and workspace that can reach production or consumer data.
Login credentials and keys are stored in 1Password. Only vetted employees can open that vault.
Encryption
We encrypt data while it travels and while it is stored, including data we receive from Plaid, the service that connects financial accounts.
Data in transit
We protect information traveling between a browser or app and our servers with TLS 1.2, the standard that encrypts that connection.
Data at rest
Consumer data is encrypted in storage, including data we receive from Plaid.
Vulnerability scanning
Our engineering staff scan production systems on a routine cadence and review the results.
We do not currently scan employee or contractor laptops. Laptop scanning is planned.
Privacy, consent, and deletion
Privacy policy
The Good Grief application is covered by our Privacy Policy, including the flow where people connect financial accounts.
Consent
When you connect a financial account, you confirm consent with a checkbox first. That consent covers collection, processing, and storage of that data.
Retention and deletion
You can delete your account on the profile page. Select Delete there.
Good Grief keeps the data for 30 days in case you want to return. After that, it is removed.
You can also download a copy of your data.
We review this retention and deletion policy at least once a year.
Questions about your data
Read the full policy, or email us about a privacy question.