Open Banking Notice

Caspianconnects to your financial accounts using Open Banking — a regulated framework that allows you to securely share your financial account information with authorised third-party providers. This notice explains how that access works, what information is retrieved, and how it is used within Caspian.

1. What Open Banking Is

Open Banking enables you to securely share financial account information with authorised providers via regulated application programming interfaces (APIs). It does not involve sharing your bank login credentials with anyone. Open Banking in the UK operates under the Payment Services Regulations 2017 (PSR 2017) and is supervised by the Financial Conduct Authority (FCA).

2. Caspian's Role

Double AI Limited (trading as Caspian) acts as an agent of Finexer Ltd (company number 12191948), with Finexer as the FCA-authorised provider under the Payment Services Regulations 2017. Our access to your financial data is read-only.

Caspian cannot and does not:

• Initiate payments or move money on your behalf
• Access your bank login credentials
• Modify any information held by your bank

3. Information Accessed

Depending on your institution and the permissions you grant, Caspian may access the following information from your connected accounts:

• Account name and identifier (such as IBAN, sort code, and account number)
• Account balances
• Transaction history, including descriptions, amounts, and timestamps
• Merchant information and payment references

The specific data available depends on your financial institution. Caspian only retrieves information you explicitly approve during the authorisation process.

4. How Authorisation Works

When you connect an account, you will be:

• Redirected to your bank's own interface
• Asked to authenticate using your bank's security methods
• Prompted to approve the specific data you wish to share
• Returned to Caspian once your bank has granted permission

Caspian never receives your bank login credentials at any point during this process. All authentication takes place directly between you and your bank.

5. Duration of Consent

Open Banking consent is typically valid for up to 90 days, after which you will need to re-authenticate with your bank to continue sharing data. You can reconnect your accounts at any time within Caspian.

6. How Your Data Is Used

Information retrieved through Open Banking is used within Caspian for the following purposes:

• Displaying your account balances and transaction history
• Categorising your transactions
• Identifying merchants and counterparties
• Detecting recurring payments and subscriptions
• Generating financial insights and analytics
• AI-powered analysis and conversational features
• Providing shared household financial views

Caspian uses machine learning and AI to power some of these features. However, no automated decisions with legal or similarly significant effects are made solely on the basis of your financial data. Caspian uses Ntropy for transaction enrichment, including merchant identification and category inference.

7. Revoking Access

You can disconnect a financial account at any time from within the Caspianapp. You may also withdraw consent directly via your bank's own interface. Disconnecting an account will stop further data retrieval, but previously retrieved data may be retained in accordance with our Privacy Policy. You can request deletion of your data by contacting us.

8. Security

Caspianaccesses your data only through regulated Open Banking APIs. We do not store your bank login credentials. Data is transmitted using secure protocols and handled in accordance with industry-standard security controls. Authentication and authorisation are managed through your bank's own regulated systems.

9. Changes to This Notice

We may update this Open Banking Notice to reflect changes in regulatory requirements, technical infrastructure, or the services we provide. Where changes are material, we will notify you in advance.

10. Contact

Double AI Limited
Email: [email protected]