Orbeva

Privacy Policy

Last updated: June 2026

⚠️ Draft for review. This describes Orbeva's actual data practices accurately, but you should have it reviewed by counsel before relying on it for production / Plaid's production application.

Orbeva ("we", "us") helps you understand your own money. This policy explains what we collect, why, and the choices you have.

What we access

Account & balance data, transactions, and investment holdings from the financial institutions you choose to connect, via Plaid.
Your email and password (passwords are stored only as a salted hash — we never see your actual password).

We connect to your banks in read-only mode. We never request, and cannot perform, money movement — no transfers, no trades, no payments.

How your data is protected

Your Plaid access tokens are encrypted at rest (AES-256-GCM).
Each customer's data is logically isolated. We do not commingle your data with other users' in any view.
Traffic is served over HTTPS.

How we use it

Solely to show you your own picture — net worth, cash flow, spending patterns, recurring charges, savings goals, and a weekly summary — and to operate and improve the service. We do not sell your data or share it for advertising.

Plaid

When you connect a bank, you also interact with Plaid Inc., which handles your bank credentials directly — Orbeva never sees them. Plaid's handling of your data is governed by the Plaid End User Privacy Policy.

Email

We send transactional email (sign-in links, invites) and, if enabled, your weekly brief, via our email provider. You can opt out of the weekly brief at any time.

Your choices

Disconnect a bank anytime in the app — this revokes the Plaid connection and deletes the data sourced from it.
Delete your account and all associated data by contacting us.

Not financial advice

Orbeva is decision-support and informational only. It is not investment, tax, or legal advice. Confirm important decisions with a qualified professional.

Contact

Questions or deletion requests: [your contact email].