PlavaFin
DRAFT — pending attorney review. This document is a working template, not a finished legal agreement, and is not legal advice. Bracketed [PLACEHOLDERS] will be completed before launch.

Privacy Policy — PlavaFin

Effective date: [EFFECTIVE_DATE]

PlavaFin (“PlavaFin,” “we,” “us,” or “our”) is a product of Nebula Edge LLC. This Privacy Policy explains what information we collect through the PlavaFin application and website at plavafin.com (the “Service”), how we use and share it, and the choices you have. Nebula Edge LLC’s company website is nebulaedge.ai.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

Account and identity information. When you create an account, our authentication provider (Clerk) collects your email address and authentication credentials. We do not store your password.

Financial account information (via Plaid). When you connect a bank or financial account, you do so through Plaid Inc. (“Plaid”). With your authorization, Plaid provides us with information such as your account names and types, balances, and transaction history (dates, amounts, descriptions, merchant names, and categories). We never receive or store your bank login credentials — those are handled by Plaid. Our use of that data is described below; Plaid’s own handling of your information is governed by Plaid’s End User Privacy Policy at https://plaid.com/legal/#end-user-privacy-policy.

Information you provide. Categories, tags, rules, budgets, notes, and other content you create or edit within the Service.

Usage and device information. Basic technical data such as IP address, browser type, and log information, used to operate and secure the Service.

2. How we use your information

We use your information to:

  • provide, maintain, and improve the Service — including importing, categorizing, tagging, and reporting on your transactions across your personal, rental, and business entities;
  • authenticate you and keep your account secure;
  • keep your connected accounts in sync (via Plaid) and notify you when a connection needs attention;
  • respond to your requests and provide support;
  • comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We may show advertising to support the Service; if we do, we will not use the financial account or transaction data we receive through Plaid to target those ads.

3. How we share your information

We share information only as follows:

  • Service providers that operate the Service on our behalf, under contract and only for that purpose: Plaid (bank connectivity), Clerk (authentication), Amazon Web Services (hosting), and Cloudflare (content delivery and security). When we add payment processing, that provider (e.g., Stripe) will be added here.
  • Legal and safety — when required by law, or to protect the rights, safety, and property of Nebula Edge LLC, our users, or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

4. Data security

We protect your data with industry-standard measures, including encryption in transit (TLS) and encryption at rest. Your entire database is encrypted at rest, your bank-provider access tokens are separately encrypted on top of that, and backups are encrypted as well. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.

5. Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time; when you do, we delete your associated data — including connected-account information — and revoke the corresponding financial-provider access tokens. Some information may be retained where required by law or for legitimate business purposes (such as fraud prevention or dispute resolution).

6. Your rights and choices

Depending on where you live (including under the California Consumer Privacy Act and similar U.S. state laws), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing. To exercise these rights, contact us at [PRIVACY_EMAIL]. We will not discriminate against you for exercising them. You can also disconnect a financial account at any time within the Service, and manage your authentication settings through your account.

7. Children’s privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

8. International users

The Service is operated in the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S., where data-protection laws may differ from those in your country.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

10. Contact us

Questions about this Privacy Policy or your information:

Nebula Edge LLC Email: [PRIVACY_EMAIL] Mailing address: [MAILING_ADDRESS]