Is storing access tokens in database okay?

Hi all.

I have an app where users give me the ability to see and manage their accounts on a financial management platform. Is it okay to store these users’ access tokens for this financial management platform in my bubble database, so I can use these access tokens to make api calls when needed? These api calls will read financial info from the platform, make edits, etc.

Yes but only if they are secure with correct privacy rules and other users cannot see them.