Privacy policy

1. Who we are

[Company legal name] ("NOVARA", "we") operates NOVARA. NOVARA is a financial institution offering checking, savings, debit cards, and payments. Card payments are processed by Stripe.

2. What we collect

Account data: your name, email address, date of birth, home address, and phone number. We don't collect Social Security numbers, government ID images, or bank login credentials.

Activity data: the accounts, transactions, cards, transfers, and support requests associated with your account.

Device and session data: IP address, browser and device type, sign-in times, passkey identifiers, and push notification subscriptions.

Payment data: if you add money with a debit card, the card is entered in a form hosted by Stripe. We receive only the card brand, last four digits, expiry, and Stripe identifiers.

3. How we use it

To operate and secure your account (including fraud and abuse checks), send the emails and notifications you've chosen, respond to support requests, and improve the product. We don't sell your personal information or use it for advertising.

4. Service providers

We share data only with providers that help us run NOVARA, under contracts that limit their use of it: Stripe (card funding), Resend (email delivery), Netlify (hosting), and Neon (database). Market data comes from a third-party provider and contains no personal information.

5. How long we keep it

We keep account and activity data while your account is open and for up to 12 months after it closes, unless a longer period is required by law. Security logs are kept for up to 24 months.

6. Security

We use passkeys and two-factor authentication, encryption in transit, encrypted storage for sensitive fields, role-based staff access, and a tamper-evident audit log. No system is perfectly secure; tell us right away if you suspect unauthorized access.

7. Your choices and rights

You can view and update your profile in Settings, manage notifications, sign out devices, and ask us for a copy of your data or to delete it. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act. We won't discriminate against you for using them.

8. Children

NOVARA is for people 18 and older. We don't knowingly collect data from children.

9. Changes

We'll post changes here with a new version and effective date, and tell you in the app or by email if they're significant.

10. Contact

Email info@novarafinance.site or write to [Company legal name], [Registered address].