Privacy Policy

Last updated: December 15, 2024

1. Introduction

Simvora, Inc. ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance planning service ("the Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address and password when you create an account
  • Profile Information: Name, display name, and optional profile details
  • Financial Data: Income, expenses, savings, investments, debts, and financial goals you enter into the Service
  • Payment Information: Billing details processed securely through our payment provider (Stripe)

2.2 Information Collected Automatically

  • Usage Data: How you interact with the Service, features used, and time spent
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and pages viewed

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Generate personalized financial projections and insights
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices:

  • Data is encrypted in transit (TLS/SSL) and at rest
  • We use Supabase for secure data storage with row-level security
  • Payment information is processed by Stripe and never stored on our servers
  • Regular security audits and monitoring

While we implement safeguards to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, payment processing, analytics)
  • Legal Requirements: When required by law, legal process, or government request
  • Protection: To protect the rights, property, or safety of Simvora, our users, or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you have given us explicit permission

6. Your Rights (GDPR & UK GDPR)

If you are in the UK or European Economic Area, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request restriction of processing
  • Data Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us via the contact form ([email protected]). We will respond within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will delete or anonymize your data upon request, unless we are required to retain it for legal or legitimate business purposes.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Understand how you use the Service
  • Improve our Service based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.

9. Third-Party Services

We use the following third-party services that may collect information:

  • Supabase: Authentication and database hosting
  • Stripe: Payment processing
  • xAI: AI features powered by Grok (queries are processed without storing personal financial data)

These services have their own privacy policies governing the use of your information.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Simvora, Inc.
Privacy: [email protected]
Data Protection Officer: [email protected]
Or use our contact form.

14. Supervisory Authority

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.