What we keep
Name, contact details, and the identity fields on an application. Ledgers for deposits, cards, loans, and investments, stored in cents. Messages, support tickets, statements, and the audit events that record who changed a status. We keep the application you submitted, including the authorization you confirmed.
Who can see a record
You can see your own profile after you sign on. Administrators can read a customer profile in order to service it. If an administrator signs on as you, that impersonation is logged and, when the notice is enabled, mailed. A banker can replace a passcode. A banker cannot display the current passcode or a security answer.
Passcodes, passwords, and answers
Your sign-on password and your money passcode are different secrets. Security answers are stored hashed. None of those values is shown back to staff. An administrator who resets one sets a new value. They do not recover the old one.
How long
Statements remain in the document centre for 24 months under the published setting. A support ticket can close after 14 days without a reply. Other records follow the books of the bank and are not deleted because a marketing page said so.
Who we share with
Processors that move ACH or wires, the bureaus named when you enroll in credit monitoring or a credit-builder card that reports, and anyone you authorize on a ticket. We do not sell customer data. An investment account is shared with the records that book it. That sharing does not make the investment a deposit.
Credit information
Credit monitoring names Experian, Equifax, and TransUnion and refreshes a score on a 30-day cycle after enrollment is released. A score is not a loan approval. Identity details are reviewed before a score is shown.
Deleting a profile
A banker can delete a customer who is not an administrator. Deletion is irreversible. It is not something this public form can do, and it is not a substitute for closing a product that still has a balance.