Privacy Policy

1. Introduction

This Privacy Policy describes how Finora (product name Orvix Finora, operated in connection with Orvix1) (“Finora,” “we,” “us,” or “our”) handles information when you use our website and application (the “Service”).

Finora is a personal and business financial workspace. It lets registered users manage accounts, transactions, budgets, projects, documents, inventory, shared expenses, and related features inside a private user workspace.

By using the Service, you acknowledge this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Depending on how you use Finora, we may process the following categories of information:

• Account information. Name, email address, password (when you use email/password registration), preferred settings, and profile details you choose to provide.
• Google Sign-In information. If you sign in or register with Google, we receive limited profile data as described in Section 4.
• Workspace content you create. Financial and business records you enter or upload in your account (for example accounts, transactions, budgets, projects, documents, attachments, contacts, and similar data). This content is associated with your user account.
• Optional email-sending credentials. If you connect a mail provider in Settings (such as SMTP or optional Gmail send), we store the credentials or tokens needed to send email on your behalf.
• Technical and security data. Session information, device/browser-related session metadata we use for login security, audit events related to authentication and account actions, and standard server logs needed to operate and protect the Service.
• Communications. Information you send us when you contact support.

We do not intentionally collect special categories of data beyond what you choose to store in your own workspace records.

3. How We Use Information

We use information to:

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts
• Store and display your workspace content to you
• Send transactional notifications you enable (for example in-app or email notifications)
• Send emails from your connected mail settings when you use document or invitation email features
• Respond to support requests
• Prevent abuse, enforce terms, and comply with legal obligations

We do not sell your personal information. We do not use Google Sign-In data to access Google services beyond the authentication (and, if you separately opt in, email-sending) purposes described below.

4. Google Sign-In / Authentication

Finora offers Sign in with Google so you can create or access an account without managing a separate password (unless you also set one).

For Google Sign-In / registration, Finora requests only these OAuth scopes:

• openid
• profile
• email

From those scopes, Finora typically receives and stores:

• Your Google account email address
• Your name
• Your Google user identifier
• Your Google profile avatar URL (when provided)
• Whether your Google email appears verified

Finora’s Google Sign-In does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or other Google product data.

Separately, if you choose to connect Gmail sending in Settings (optional), Finora requests additional permission limited to sending email (https://www.googleapis.com/auth/gmail.send), along with basic identity scopes. That optional connection is used only to send messages you initiate from Finora (for example certain document or invitation emails). It is not used to read your inbox or browse other Gmail content. You can disconnect Google Sign-In or Gmail sending from Settings when available.

Google’s use of information is also governed by Google’s own policies. You can review Google’s Privacy Policy at policies.google.com/privacy.

5. Cookies and Local Storage

Finora uses cookies and similar browser storage that are necessary to operate the Service, including:

• Session cookies to keep you signed in securely
• CSRF protection cookies to help prevent cross-site request forgery
• Local storage for preferences such as theme (light/dark) and certain in-browser form draft helpers

We do not currently operate third-party advertising or analytics cookies as part of the core Finora application code reviewed for this policy. If that changes, we will update this Privacy Policy.

6. Third-Party Services

Finora may rely on third-party services that process data only as needed to provide features you use, such as:

• Google — Sign-In / OAuth authentication, and optional Gmail send if you connect it
• Email delivery providers — when system or user-configured SMTP/mail settings are used to send mail
• Hosting / infrastructure providers — to run the application and store data

Those providers process information under their own terms and privacy policies. Finora does not control Google’s or other providers’ independent practices.

7. Data Retention

We retain account and workspace data for as long as your account remains active and as needed to provide the Service. If you request account deletion through Finora’s privacy/account settings, we process that request according to the application’s deletion workflow (which may include a waiting period before final purge).

Backup copies, security logs, or legal holds may persist for a limited additional period where reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance.

8. Data Security

We apply reasonable technical and organizational measures designed to protect information, such as authenticated access, permission checks, session controls, and encrypted storage for certain sensitive credentials (for example mail tokens or passwords where the application encrypts them).

No method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential and for using strong account security practices.

9. User Rights and Choices

Depending on your location and applicable law, you may have rights to access, correct, export, or delete personal data.

Within Finora, where available, you can:

• Update profile and settings information
• Request a personal data export
• Request account deletion
• Manage active sessions
• Connect or disconnect Google Sign-In and optional Gmail sending
• Control notification preferences

To exercise a privacy request, use the in-app privacy settings where available, or contact us at mubashiriqbal9201@gmail.com.

10. Children's Privacy

Finora is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and post the updated policy at this URL. Continued use of the Service after changes become effective constitutes acceptance of the updated policy to the extent permitted by law.

12. Contact Information

For privacy questions or requests related to Finora, contact:

Email: mubashiriqbal9201@gmail.com

Related: Terms of Service