Settings

Configure plan preferences and review the privacy boundaries for manual entry and paid Plaid sync.

Plan settings

Manual settings are saved in this browser. Update the household label, payoff strategy, and monthly payoff budget.

Authorization rule

Do not rely on proxy headers for authorization. Re-check the user in Server Actions and Route Handlers.

Connection roadmap

Boundaries to keep real financial data protected.

Require a verified user before reading or changing debt records.

Do not collect credentials, account numbers, or routing numbers in manual mode.

Keep row ownership rules active before paid Plaid sync is enabled.

Exchange Plaid tokens only in authenticated server-side routes.

Run coaching requests server-side with prompt redaction and rate limits.

Keep billing checkout and webhooks in server-only modules.