AURRION

Privacy Policy

Last updated June 2026

This Privacy Policy explains what information Aurrion (“we,” “us”) collects, how we use it, who we share it with, and the choices you have. By using Aurrion you agree to this policy.

Information we collect

Account information you provide — your name, email, phone number, and the pay details you enter during onboarding (rank, time in service, location, filing status, and similar).

Financial data from accounts you choose to connect. We connect to your bank through Plaid, a regulated third-party provider. Aurrion never sees or stores your bank username or password — only the account balances, transactions, and liabilities you authorize, plus a secure access token that is encrypted at rest.

Payment informationwhen you subscribe. Payments are processed by Stripe; we don’t store your full card number. We keep a Stripe customer reference and your subscription status.

Limited technical informationneeded to operate and secure the service, such as the device and browser used to sign in (shown to you in your account’s activity log) and basic error diagnostics.

How we use your information

We use your information to provide and improve the service: to estimate your pay, build your pay plan, show balances and transactions, process subscriptions, send sign-in codes and important account emails, and keep your account secure. We do not use your financial data for advertising.

We do not sell your data

We do not sell, rent, or trade your personal or financial information. We share data only with the service providers needed to run Aurrion — such as Plaid (bank connections), Stripe (payments), Resend (email), and our hosting/database providers — and only as needed to provide the service or as required by law.

How your data is protected

Your data is isolated to your account at the database level, bank access tokens are encrypted, sign-in supports passkeys and trusted-device verification, and all traffic is served over HTTPS. No system is perfectly secure, but we use industry-standard safeguards to protect your information.

Data retention

We keep your data while your account is active. Security audit records are retained for a limited period and then purged. When you delete your account, we remove your data and revoke every bank connection; some records may persist briefly in backups or where retention is required by law.

Your choices and rights

You can disconnect any bank at any time from the Accounts page. You can export everything we store, or permanently delete your account and all associated data, from Settings. Depending on where you live, you may have additional rights to access, correct, or delete your information — contact us to exercise them.

Children

Aurrion is not directed to anyone under 18, and we don’t knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. If we make material changes we’ll take reasonable steps to notify you, and the “last updated” date above will change.

Contact

Questions about this policy? Email us at info@aurrion.ai.