This Policy explains what data the Zori service (the “Service”) collects, and how we use and protect it. By using the Service, you agree to this Policy.
Account: email, business name, avatar, settings (currency, language, industry). Financial data: transactions, amounts, balances and subscriptions from the sources you connect (Stripe, PayPal, bank accounts via open banking) — read-only. Technical data: sign-in records and basic logs for security. We do not store passwords in plain text and do not store your bank credentials — the bank connection happens on the bank’s side.
Only to provide the Service: compute analytics and reports, show forecasts, answer your questions in the AI assistant, and send notifications you enable. We do not sell your data and do not use it for advertising.
Bank connection is performed through a licensed open-banking provider and grants read-only access. We cannot initiate payments. Consent can be revoked at any time — in the “Integrations” section or on the bank/provider side.
To run the Service we use trusted vendors that process data on our behalf: application hosting and database (cloud providers); payment and banking aggregators (Stripe, open-banking provider); email delivery (verification, reports, login codes); an AI provider — to phrase the assistant’s answers.
Integration tokens are stored encrypted (AES-256-GCM), passwords as an irreversible hash, and connections are secured with HTTPS. Each organization’s data is isolated from others. Complete security on the internet cannot be guaranteed, but we apply reasonable technical measures.
We keep your data while your account exists. You can request disconnecting integrations and deleting your account together with related data by contacting us.
You may request access to your data, its correction or deletion, and withdraw consents. To do so, contact us.
For privacy questions: support@zori.finance.