Legal

Privacy Policy

Effective date: April 13, 2026  ·  Last updated: April 13, 2026

Bravisma Soft Inc. / Aurelius Finance

This Privacy Policy describes how Bravisma Soft Inc. ("Company", "we", "us", or "our"), a Delaware corporation with its principal place of business at 131 Bovet Rd., Suite 210, San Mateo, CA 94402, collects, uses, and shares information in connection with Aurelius Finance ("Service"), accessible at aureliusfinance.us and app.aureliusfinance.us.

1. Information we collect

Account information. When you create an account we collect your name, email address, and password. If you connect via messaging platforms (Telegram or WhatsApp), we also collect your phone number and messaging platform identifier.

Financial data via Plaid. With your explicit consent, we connect to your financial institutions through Plaid Inc. to retrieve account balances, transaction history (up to 24 months), investment holdings, and liability information. We do not store your financial institution login credentials. All financial data is retrieved through Plaid's secure API.

Usage data. We collect information about how you interact with the Service, including pages visited, features used, AI agent queries, and device and browser information.

Payment information. Subscription payments are processed by Stripe Inc. We do not store your payment card details. Stripe's privacy policy governs their handling of payment data.

Communications. If you contact us or submit a waitlist request, we retain that correspondence.

2. How we use your information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Aggregate your household financial data and generate AI-powered insights
  • Send transactional emails and in-app notifications
  • Process subscription payments
  • Respond to your requests and provide customer support
  • Comply with legal obligations and enforce our terms
  • Monitor for security incidents and prevent fraud

We do not sell your personal information or financial data to third parties. We do not use your financial data for advertising purposes.

3. Third-party services

Plaid Inc.

We use Plaid to connect to your financial institutions. When you link an account, you interact directly with Plaid's interface. Plaid collects and transmits your financial institution credentials and account data subject to Plaid's Privacy Policy at plaid.com/legal. By connecting your accounts you agree to Plaid's terms. We do not store your financial institution login credentials. Financial account data retrieved via Plaid is encrypted at rest and in transit and is used solely to provide the Aurelius Finance service.

Anthropic PBC

Our AI advisor feature is powered by Anthropic's Claude API. Queries you send to the AI agent are processed by Anthropic subject to their usage policies. We do not send your full financial data to Anthropic — only the context required to respond to your specific query.

Stripe Inc.

Payment processing is handled by Stripe. Your card details are never transmitted to or stored on our servers.

Vercel Inc. and Supabase Inc.

Our Service is hosted on Vercel and our database is hosted on Supabase (AWS infrastructure). Your data is stored on servers located in the United States.

Resend Inc.

Transactional emails are sent via Resend. Your email address is shared with Resend solely for the purpose of email delivery.

4. Data security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, row-level security policies that enforce household-level data isolation, and multi-factor authentication for administrative access. Plaid access tokens are stored using encrypted vault storage. Despite these measures, no transmission over the internet is 100% secure and we cannot guarantee absolute security.

5. Data retention and deletion

We retain your account and financial data for as long as your account is active or as needed to provide the Service. Transaction history is retained for up to 24 months by default. Audit logs are retained for a minimum of 90 days. Upon account deletion, we permanently delete your personal information, financial data, and household data within 30 days, except where retention is required by law. To request deletion of your data, contact us at info@aureliusfinance.us.

6. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to knowwhat personal information we collect, use, and disclose
  • Right to deleterequest deletion of your personal information
  • Right to correctrequest correction of inaccurate personal information
  • Right to opt outwe do not sell personal information, so this right does not apply
  • Right to non-discriminationwe will not discriminate against you for exercising your rights

To exercise these rights, contact us at info@aureliusfinance.us. We will respond within 45 days.

7. Children's privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at info@aureliusfinance.us.

8. Cookies and analytics

We use Vercel Analytics to collect anonymised usage data such as page views and performance metrics. We do not use advertising cookies or cross-site tracking. You may disable cookies in your browser settings, though this may affect certain features of the Service.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 30 days before the change takes effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Bravisma Soft Inc.

131 Bovet Rd., Suite 210

San Mateo, CA 94402

Delaware C-Corporation

This privacy policy was last updated April 13, 2026. This document is provided for informational purposes. Bravisma Soft Inc. recommends consulting a licensed attorney for legal advice specific to your situation.