Privacy Policy

1. Scope

Kevoro (“Kevoro,” “we,” “us,” or “our”) is a read-only financial data connectivity service operated by GEA Ventures LLC. This Privacy Policy applies to kevoro.finance, the Kevoro dashboard, API, and related support interactions (collectively, the “Service”).

2. Information We Collect

2.1 Information you provide directly

• Account registration information, such as your email address and authentication identifiers.
• Profile, settings, and connection preferences.
• Communications you send to us, including support requests and other correspondence.

2.2 Financial account information

Depending on the accounts you connect, we may receive:

• Institution, account, and connection metadata.
• Masked account numbers and account type.
• Balance information.
• Transaction history and metadata.
• Investment holdings, securities, and related metadata.
• Sync status, connection health, and error information.

We do not collect or store your online banking username or password.

2.3 Service usage information

• App authorization and connection status.
• API requests and responses.
• Request context, timestamps, and technical metadata.

2.4 Device and technical information

• IP address and approximate location.
• Browser, device, and session information.
• Pages and endpoints accessed.
• Security, audit, and performance logs.

3. How We Use Information

• Create and maintain your account.
• Authenticate you and secure the Service.
• Connect, refresh, store, and display financial data.
• Provide dashboard and API features.
• Maintain connection health.
• Detect and prevent fraud and abuse.
• Comply with legal obligations.
• Improve and support the Service.

4. How We Disclose Information

4.1 At your direction

When you link accounts or use the Service, you direct us to process and disclose information as needed to provide the requested features.

4.2 Service providers

• Plaid, for account connectivity.
• Authentication and identity providers.
• Cloud hosting and infrastructure (Microsoft Azure).
• Customer support and security providers.

4.3 Legal and compliance

• To comply with law or legal process.
• To protect rights, safety, and security.
• In connection with corporate events.

5. Cookies and Tracking

We use cookies and local storage for authentication, security, and service operation. We do not sell personal information or share it for cross-context behavioral advertising.

6. Data Retention

We retain information as long as reasonably necessary. If you disconnect or delete your account, we generally remove associated data within 30 days, subject to backup retention and legal obligations.

7. Data Security

We use administrative, technical, and physical safeguards including encryption in transit and at rest, access controls, and vendor oversight. No method is completely secure.

8. Your Choices and Rights

• Manage linked accounts through the Service.
• Use Plaid Portal to manage Plaid-connected relationships.
• Request access, correction, export, or deletion by contacting us.
• Revoke API access at any time.

9–12. Additional Provisions

• We may create de-identified or aggregated information for analytics and improvement.
• The Service is not directed to children under 18.
• We may update this Policy and will post changes with a new date.
• Contact: privacy@kevoro.finance.