Privacy Policy

Last updated: 24 May 2026

Muhammad Ali (ABN 68 110 317 248) operates the myBank.chat service, which lets you query your banking data through ChatGPT using Australia's Consumer Data Right (CDR) open banking system. This policy explains what personal information we collect, how we use it, and your rights.

1. Who we are

myBank.chat is operated by Muhammad Ali (ABN 68 110 317 248). For privacy enquiries, contact us at privacy@mybank.chat.

2. Information we collect

• Mobile number — collected when you sign up for early access or connect your bank. Used to identify your account and, where required, to deliver one-time passcodes via your bank.
• Banking data — accessed in real time from your bank via Basiq (an ACCC-accredited CDR data recipient) each time you ask a question in ChatGPT. This data is not stored by myBank.chat; it is returned directly to your conversation.
• Account identifier — a random UUID created when you first authenticate via ChatGPT, used to link your session to your bank connection.

3. How we use your information

• To connect your bank account through the CDR consent framework.
• To answer your financial questions inside ChatGPT by retrieving transaction and account data on demand.
• To manage access to the early-access preview (waitlist).

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data storage and retention

Your banking transaction and account data is never stored by myBank.chat — it flows directly from your bank to your ChatGPT conversation in real time. We store only your mobile number and the reference ID linking your account to Basiq, which is necessary to maintain your consent.

If you disconnect your bank, all data held by myBank.chat and the corresponding Basiq user record are permanently deleted immediately.

5. Consumer Data Right (CDR)

myBank.chat accesses your banking data under Australia's Consumer Data Right framework via Basiq, an ACCC-accredited CDR data recipient. Your CDR consent is governed by Basiq's CDR policy. You can withdraw consent at any time by disconnecting your bank through the myBank.chat GPT, or by contacting us.

6. Third-party services

• Basiq — CDR data recipient that facilitates the bank connection. See Basiq's Privacy Policy.
• OpenAI / ChatGPT — the interface through which you interact with myBank.chat. See OpenAI's Privacy Policy.
• Railway — cloud hosting provider for the myBank.chat backend.

7. Security

All data in transit is encrypted via TLS. Your banking credentials are never seen or stored by myBank.chat — authentication is handled entirely by your bank through the CDR consent flow. We do not store passwords or full account numbers.

8. Your rights

Under the Australian Privacy Act 1988 and the CDR Rules, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data — disconnect your bank at any time to trigger immediate full deletion.
• Withdraw your CDR consent at any time without affecting your other rights.

To exercise these rights, email privacy@mybank.chat.

9. Cookies

The myBank.chat website uses a session cookie solely to manage the OAuth handshake with ChatGPT. No tracking or advertising cookies are used.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, contact us at privacy@mybank.chat.