What does read-only mean in Candor?
Candor never changes anything at your bank. Your agent can read balances, transactions, holdings, debts, and recurring payments, and can save workspace records it works out with you: budgets, goals, notes, decisions, and corrections. It cannot move money, pay a bill, trade, open or close an account, or cancel a subscription through Candor.
Read-only describes the direction that matters: nothing flows from Candor to your institutions. Inside the workspace your agent does real work. It keeps the budget you agreed on, fixes a mislabeled merchant, records why you kept a charge, and notes a refund to check next month. Those records are what let the next conversation, or a different agent, start where the last one ended.
- Your agent can, in Candor
- Read balances, transactions, holdings, and debts
- No one can, through Candor
- Move money
- Your agent can, in Candor
- See recurring payments and price changes
- No one can, through Candor
- Pay bills
- Your agent can, in Candor
- Read Candor's weekly review of what's worth talking through
- No one can, through Candor
- Trade
- Your agent can, in Candor
- Save budgets, goals, notes, and decisions
- No one can, through Candor
- Open or close accounts
- Your agent can, in Candor
- Export your organized data when you ask
- No one can, through Candor
- Cancel subscriptions
Can AI move my money through Candor?
No. Candor provides no payment, transfer, trading, or cancellation tools. An agent may have separate tools that can act outside Candor, so review those permissions independently. Read-only financial access also still carries privacy risk.
A policy can change quietly. A missing capability cannot be misused. That is why Candor holds the facts and the follow-up, and leaves action with the agent you already trust, under the permissions you already gave it.
In practice the split looks like this: Candor's weekly review raises what's worth talking through, with the records behind each item. Your agent brings it to you. You decide. If the decision needs action outside Candor, your agent asks you before it acts, and the decision stays in Candor so the next check-in can confirm it happened.
How does bank sign-in work, and who sees my password?
Candor connects accounts through Plaid's account-linking flow. Candor does not receive your bank password, and your agent does not need it. Use the linking screen rather than entering credentials into a chat.
Your bank and Plaid handle the connection flow, which varies by institution. Candor keeps the provider connection credentials on its backend. The credentials your agent uses to access Candor are separate from those bank-connection credentials.
What does my agent's access actually include?
Only what you approve in the browser. When your agent connects, Candor shows what it is asking for: reading your workspace, keeping budgets, goals, notes, and corrections, refreshing the accounts you connected, and staying connected in the background. Connecting or removing accounts stays with you in Candor. You approve once, and you can disconnect it later from the Connections page.
Access is granted to an agent client, such as a Claude connector or a CLI install, not to each individual process. Any agent that can use that approved client can read within its scope, so disconnect clients you no longer use.
You also choose what goes in. Candor only sees the accounts you connect or the statements you import. Leave an account out and no agent sees it through Candor.
Is every read of my financial data logged?
Yes. Every operation your agent runs in Candor, including every read, is recorded as an entry that cannot be edited, with its reason, and kept for as long as your workspace exists. You can review that history on the Activity page. The log says what kind of data was read, when, and why, without copying your raw financial data into it.
Reasons are the agent's own words, such as checking whether a price increase has been billed again. They make the history useful to you and to the next agent: you can see what was looked at and why. A reason is not approval. Anything that needs your decision still comes to you.
Does Candor train AI on my data or sell it?
No. Candor never sells your financial data, never uses it for advertising, and never trains models on it. When Candor uses outside services to organize transactions, they run under zero-data-retention settings. What your agent reads from Candor then follows your agent's own settings, such as ChatGPT's Data controls or Claude's Model Improvement setting.
That last point is worth acting on. Candor controls what Candor stores. The conversation where your agent discusses your figures lives in ChatGPT, Claude, Muse, or wherever your agent runs. OpenAI says ChatGPT finance chats follow your training setting, Anthropic uses Claude consumer chats for training when Model Improvement is on (and may use a chat flagged for safety review to improve Usage Policy enforcement), and Meta lets you opt out for Muse. Set those the way you want.
How do I revoke access or delete my data?
Disconnect any agent from the Connections page, and it can no longer read your workspace. Export your organized data from Settings. Delete your account from Settings, which disconnects your institutions, revokes all agent access immediately, removes bank connection credentials, and deletes your workspace, including records, notes, and history.
Disconnecting a single bank ends Candor's access to it and keeps the history you already have, unless you delete your data. Revoking an agent keeps your workspace intact, so approving a different agent later picks up where you left off. Managed backups expire on their own schedule, up to 14 days, and the privacy policy lists every retention period.
Why is read-only enough for a financial advisor's job?
Many useful financial tasks begin with reading records: reviewing spending, comparing recurring charges, checking budget progress, and gathering questions. Candor supplies those records and every week raises what's worth reviewing; your agent discusses the choices with you.
Candor is not a licensed advisor and gives no advice. Your agent makes suggestions from the figures, and you make the call. Keeping action outside Candor is what makes it reasonable to give an agent a complete view of your money.
Common questions
- Does read-only access mean an AI cannot leak financial data?
- No. Read-only limits changes to accounts; it does not prevent disclosure of information an agent can read. Protect the agent account, review its data settings and other tool permissions, and disconnect access you no longer need.
- Is read-only enforced, or just promised?
- Enforced by what Candor ships. Candor has no tool that moves money, pays bills, trades, or changes anything at a financial institution, so read-only does not depend on an agent behaving well. There is nothing in Candor for it to misuse.
- What can my agent write to Candor?
- Only workspace records: budgets, goals, notes, decisions, category corrections, and confirmed recurring payments, worked out with you. Each write is logged with its reason. None of it reaches your bank.
- Is ChatGPT Finances read-only too?
- OpenAI says ChatGPT's Finances connection cannot see full account numbers or make any changes to your accounts. The differences are elsewhere: it works only inside ChatGPT, OpenAI's materials do not describe a read history like Candor's (answers may cite the source data), and your chats follow your ChatGPT training setting.
- Can I choose which accounts my agent sees?
- Yes. Candor only holds the accounts you connect or the statements you import. Leave an account out and no agent can read it through Candor. You can disconnect an institution later without deleting your history.
- What happens when I revoke an agent's access?
- It stops working at once. Your records, budgets, goals, notes, and history stay in your workspace, so approving a different agent later, or the same one again, starts from everything already saved.
Sources
- Privacy policy Candor
- Trust and data controls Candor
- A new personal finance experience in ChatGPT OpenAI, October 2, 2026
- Finances in ChatGPT OpenAI, October 7, 2026
- Is my data used for model training? (Claude consumer plans) Anthropic, March 16, 2026
- Introducing Muse Meta, September 8, 2026