Privacy Policy

Last updated July 2026

This policy explains what we collect and why. For how financial data specifically is protected, see the security page.

What we collect

• Waitlist: your email address and, if present, basic referral and campaign parameters (UTM).
• Clients: account information you connect (read-only, via Plaid) and the insights derived from it.
• Product analytics: privacy-friendly, cookieless usage events via PostHog (EU).
• Ad measurement: campaign parameters, referrer, and Google click identifiers when present. We do not include balances, transactions, credit data, or other financial values in ad-measurement events.

How we use it

• To operate the service and generate your insights.
• To contact you about onboarding and your account.
• To understand which channels bring interested users (aggregate funnel analytics).
• To measure whether an ad led to account creation or a first connected account, without using financial data for ad targeting.

What we never do

We never sell your data, and we never use your financial data to train AI models.

Your rights

You can request access, export, correction, or deletion of your data at any time by emailing privacy@orbeva.ai. You can unsubscribe from emails at any time.

Retention

We keep your data for as long as you have an account. On termination, it is deleted per our security and DPA terms.

Orbeva, Inc. Questions: privacy@orbeva.ai.