Consents

View your Consumer Data Right (CDR) consents

A CDR consent is a time-limited agreement that allows Redbark Sync to access your banking data. Each consent is tied to a specific bank and expires after 12 months.

For background on how the CDR Representative model works and what we do and don’t store, see CDR overview and Consent and data handling.

Where to view consents

Your Consents page lives at app.redbark.co/settings/consents.

To get there from inside the app:

1. Click your profile avatar in the top-right of any dashboard page.
2. Choose Settings from the menu.
3. Select the Consents tab in the left sidebar.

The page shows every consent you’ve given — active, expired, and withdrawn — with the bank, purpose, shared data categories, creation date, expiry date, and status.

Managing consents

Consent management — including withdrawal — happens through Fiskil’s consent dashboard. Fiskil Pty Ltd (ADRBNK000246) is the accredited data recipient and manages the consent dashboard centrally to meet the regulatory content and disclosure requirements under the CDR Rules. Withdrawal at the bank revokes data access immediately; the change reaches Redbark when Fiskil delivers the corresponding webhook. On receipt, the connection is marked revoked, the accounts on that connection are deleted, any sync left with no accounts is removed, and the consent record is marked withdrawn. The connection row and its stored tokens remain in place so the revoked state is auditable. This is intentionally as easy as giving consent in the first place, as required by CDR Rule 4.16.

Consent cards

Each consent shows:

• Bank name and status icon
• Purpose: what the data is used for (e.g. “Transaction sync”)
• Status badge: Active, Expired, or Withdrawn
• Data shared: the types of data included (e.g. Transactions, Accounts, Balances)
• Created date and expiry date

Statuses

Status	Description
Active	Consent is valid and data can be accessed
Expired	The 12-month consent period has ended
Withdrawn	You have revoked the consent

Expiring consents

Consents last 12 months from the date they were created. A warning badge appears when a consent is within 30 days of expiring. Once expired, syncs using that bank connection stop running.

Withdrawing consent

You can withdraw consent at any time through Fiskil’s consent dashboard. Data access is revoked at the bank straight away; on the next webhook from Fiskil, Redbark marks the connection as revoked, removes its accounts, and deletes any sync left without accounts. The connection row and its stored tokens are kept for audit purposes. Data that has already been synced to your destinations is not deleted.

To fully remove a connection and its tokens from Redbark, use Delete from the three-dot menu on the Connections page — that path removes everything for the connection.

Re-consenting

To restore access after a consent expires or is withdrawn, add a new bank connection from the connections page. This creates a fresh 12-month consent.