MerryDiv Security

We Never Store Your Credentials

Your brokerage login and password are never sent to or stored on MerryDiv servers. All authentication happens directly between you and your brokerage through Plaid's secure infrastructure.

Read-Only Access

We only have read-only access to your account data. We can view your holdings and transactions to track dividends, but cannot move money, place trades, or make any changes to your accounts.

Powered by Plaid

We connect to your brokerage through Plaid, the financial data network used by 9,000+ apps and services and connected to 12,000+ institutions.

Encrypted Connections

All data between your browser and MerryDiv is encrypted using TLS (HTTPS) — the same encryption technology used by banks and financial institutions.

Face ID / PIN Lock on Mobile

The MerryDiv iOS app can be locked with Face ID, Touch ID, or a 4-digit PIN. Turn it on from Settings → Security — after that, even someone with your unlocked phone can't peek at your portfolio.

You click “Connect Account” and Plaid’s secure window opens — this is Plaid’s interface, not ours.

You log in to your brokerage directly through Plaid. Your credentials go to Plaid, never to MerryDiv.

Plaid verifies your identity with your brokerage and grants MerryDiv read-only access to your holdings and transactions.

MerryDiv receives only the data needed to track your dividends — account balances, holdings, and dividend payments.

We store the investment data necessary to display your portfolio dashboard, including holdings, dividend transactions, and the last four digits of your account number for identification. We do not store full account numbers, routing numbers, or login credentials.

Yes. You can disconnect any brokerage account from MerryDiv at any time through your account settings. You can also use Plaid Portal to review connected apps, manage permissions, and disconnect accounts you no longer want to share. Once disconnected, MerryDiv stops receiving data from that account.

You can delete your MerryDiv account and all associated data at any time from your account settings. Once deleted, we remove your portfolio data, dividend history, and any stored account identifiers from our servers.

In the unlikely event of a security incident, we will promptly notify affected users and take immediate steps to contain and remediate the issue. Because we don't store brokerage credentials and only have read-only access, the risk to your brokerage accounts is limited.

Plaid says 9,000+ apps and services are built on its platform, about 1 in 2 U.S. adults with a bank account have used it, and it connects to 12,000+ institutions. Plaid also undergoes independent compliance audits, including SOC 2 Type 2, ISO 27001, and ISO 27701.

Yes. The MerryDiv iOS app supports Face ID, Touch ID, or a 4-digit PIN as an app-level lock. Enable it from Settings → Security in the app, or accept the one-time prompt after your first login. Once enabled, even someone with your unlocked phone can't open MerryDiv without authenticating.