What read-only actually means
Account linking is the biggest and most reasonable objection to a product like this. The distinction that matters is between a promise and a capability. A product that could trade but promises not to is asking you to trust its intentions and its security. A product whose access scope excludes trading is asking you to trust considerably less.
Killion requests read-only scope through SnapTrade. The connection can read positions, balances and transaction history. It cannot place, modify or cancel an order, cannot transfer or withdraw money or securities, and cannot change a setting on the account. A compromise of Killion could expose what you hold; it could not be used to move it.
Why Killion never sees your password
You authenticate directly with your institution inside SnapTrade's flow, including any two-factor step your brokerage requires. Those credentials never reach Killion's servers, so there is no credential store to breach.
This is the difference between token-based linking and the older screen-scraping approach that required handing over your login. Anything that asks for your brokerage password directly deserves considerably more scrutiny than this does.
What is stored, and where
- Positions, balances and transaction history from linked accounts.
- Assets and liabilities you enter manually.
- Your budget, plan and saved simulation results.
- Account details such as your email address.
Data is encrypted in transit and at rest. You can export everything or delete the account outright from your profile settings — deletion also cancels your subscription in the same operation, and if that cancellation cannot complete, nothing is deleted.
How to revoke access
Disconnect the account inside Killion, or revoke Killion from your brokerage's own connected-applications screen. Either stops the sync immediately, and the brokerage side works even if you no longer have a Killion account. Deleting your Killion account does not automatically revoke the connection at the institution, so do both if you want a clean break.
The business model is part of the security story
How a company makes money determines what it is tempted to do with your data. Killion is funded by subscriptions. There are no ads, no data brokers, no cross-site tracking, and no commissions or kickbacks from funds, brokers or advisers. Traffic measurement is cookieless and anonymous: we count page views, not people.
That is a structural claim rather than a promise: there is no revenue line that would benefit from selling or sharing your financial data, which is a better guarantee than a policy that could be revised.
What we have not done yet
SOC 2 Type II certification is on the roadmap and has not been completed. Killion has also not commissioned a third-party penetration test or security audit; security work to date is internal, including automated dependency and secret scanning in the build pipeline.
We would rather state that plainly than describe an audit we have not passed. If you are evaluating Killion against a formal security requirement, that is the honest position to evaluate against today.
Found something? Report it through the contact form and we will respond.