Privacy Policy

Last updated October 2026

This policy explains what we collect and why. For how financial data specifically is protected, see the security page.

What we collect

• Account signup: your email address and, if present, basic referral and campaign parameters (UTM).
• Clients: account information you connect (read-only, via Plaid) and the insights derived from it.
• Product analytics: privacy-friendly, cookieless usage events via PostHog (EU).
• Ad measurement: campaign parameters, referrer, and Google or Meta click identifiers (gclid, fbclid, and the Meta _fbp/_fbc cookies on campaign pages); where a signup follows an ad, a one-way hashed form of your email may be shared with the ad platform to confirm the conversion when present. We do not include balances, transactions, credit data, or other financial values in ad-measurement events.

How we use it

• To operate the service and generate your insights.
• To contact you about onboarding and your account.
• To understand which channels bring interested users (aggregate funnel analytics).
• To measure whether an ad led to account creation or a first connected account, without using financial data for ad targeting.

What we never do

We never sell your data, and we never use your financial data to train AI models.

Our AI model provider, Anthropic, runs model inference for Orbeva. Model providers are configured to disable training on your data and to request zero data retention. See subprocessors.

Your rights

You can request access, export, correction, or deletion of your data at any time by emailing privacy@orbeva.ai. You can unsubscribe from emails at any time.

Retention

We keep your data for as long as you have an account. On termination, it is deleted per our security and DPA terms.

Orbeva, Inc. Questions: privacy@orbeva.ai.