Extremely valid concerns. We're trying to be as secure as possible — personal data is strongly encrypted in our database, we're using tokens instead of bank de

Extremely valid concerns. We're trying to be as secure as possible — personal data is strongly encrypted in our database, we're using tokens instead of bank details to keep things more secure, we're implementing 2FA for logins, and we're using perfect forward security for SSL. Unfortunately, though, money laundering law mandates that we need to record personal information so there's little we can do to get around the name <=> bitcoin address issue. We have ideas (like company-specific encryption for bitcoin addresses where only employers can decrypt addresses) but it's a long way out, even if we do implement it.