Privacy Policy

We collect information that identifies or relates to you through your direct interactions, automatic collection, and third-party sources.

• Information You Provide: Includes your name, email address, postal address, phone number, and any financial goals you share.
• Financial and Transaction Data: When you link your accounts, we receive transaction history, account balances, and holdings through our data aggregation partner, Lean Technologies.
• Automatic Collection: We automatically collect your IP address, device identifiers (hardware model, OS version), browser type, and usage data (pages viewed, links clicked).
• Derived Data: We may use artificial intelligence to derive inferences about your location or financial preferences based on the data collected.

We use your personal data for the following business and commercial purposes:

• Service Delivery: Managing your account, processing transactions, and providing customer support.
• Account Aggregation: Acting as your limited agent to retrieve financial data from third-party institutions.
• Personalization: Customizing content and communications based on your financial patterns.
• Security and Compliance: Detecting fraud, preventing financial crime, and complying with legal obligations.

We do not sell your financial data. We share information only with the following categories of third parties:

• Service Providers: Partners that assist with web hosting (Amazon regional data centers), data analytics, and security.
• Financial Partners: Our aggregator, Lean Technologies, to facilitate account linking.
• Payment Processors: Apple, Google, and Stripe, who collect your payment information to process subscriptions.
• Legal Requirements: To comply with valid court orders, regulatory requests, or national security requirements.

We use physical, technical, and administrative security measures (including firewalls and encryption) to protect your data. Your data is stored and processed in Amazon regional data centers. We retain your personal data for as long as necessary to provide the Services, fulfill our business purposes, or comply with legal requirements.

Aurora Finance operates globally. If you are located outside the United States, your information will be transferred to and stored in regional data centers which may not have data protection laws equivalent to your home country. We rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your data during these transfers.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we fix inaccurate or incomplete information.
• Deletion: Request that we delete your data, subject to legal retention obligations.
• Withdrawal of Consent: Revoke your permission for us to process your data at any time.

• UAE & GCC: We process data in accordance with the CBUAE and FSRA frameworks. We recognize your "Right to Remember," allowing for a seamless experience across Lean-integrated platforms.
• Hong Kong: We comply with the Personal Data (Privacy) Ordinance (PDPO) and the Phase III Banking Open API Standards regarding customer consent and authentication.
• South Korea: We adhere to the PIPA and the Credit Information Act. We will inform you of the specific destination and recipient for all cross-border data transfers.
• Philippines: In accordance with the BSP Open Finance Framework, we recognize that you are the owner of your personal and transaction data.
• Taiwan: We require explicit "opt-in" written consent for the disclosure or joint use of any customer information beyond names and mailing addresses.
• Japan: We operate as an Electronic Payment Intermediate Service Provider and disclose our authority and indemnity as required by the Banking Act.

For any questions regarding this policy or to exercise your rights, please contact us at: