Financial Privacy Notice
Version 1.1 · Effective 2026-06-19 · Required by the Gramm-Leach-Bliley Act (15 U.S.C. §6801 et seq.)
| Facts | What does Orvica (LedgerOne) do with your personal information? |
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include:
|
| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information, the reasons Orvica chooses to share, and whether you can limit this sharing. |
| Reasons we can share your personal information | Does Orvica share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes — such as to process your transactions, maintain your account, respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| For our marketing purposes — to offer our products and services to you | No | We don't share |
| For joint marketing with other financial companies | No | We don't share |
| For our affiliates' everyday business purposes — information about your transactions and experiences | No | We don't share |
| For our affiliates' everyday business purposes — information about your creditworthiness | No | We don't share |
| For our affiliates to market to you | No | We don't share |
| For nonaffiliates to market to you | No | We don't share |
What we do
How does Orvica protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards (AES-256 encryption at rest, TLS 1.2+ in transit), secured files and buildings, role-based access controls with audit logging, and mandatory multi-factor authentication for all staff who could access customer data. Plaid access tokens are encrypted with a key not stored alongside the data, as required by the Plaid Production Access Agreement §8.6. Full security posture at /security.
How does Orvica collect my personal information? We collect your personal information, for example, when you:
- Open an account or enter your phone number
- Link a bank account via Plaid for transaction syncing
- Add a credit card, subscription, bill, or invoice manually
- Send or receive an invoice through LedgerOne
Why can't I limit all sharing? Federal law gives you the right to limit only:
- Sharing for affiliates' everyday business purposes — information about your creditworthiness
- Affiliates from using your information to market to you
- Sharing for nonaffiliates to market to you
State laws and individual companies may give you additional rights to limit sharing. Optional product notifications can also be disabled from account settings or by using unsubscribe / STOP instructions, while account-security and legally required notices may still be sent.
Definitions
Affiliates: Companies related by common ownership or control. They can be financial and nonfinancial companies. Orvica has no affiliates currently.
Nonaffiliates: Companies not related by common ownership or control. They can be financial and nonfinancial companies. Orvica does not share customer information with nonaffiliates for them to market to you. We do share with service providers (Plaid for bank-account linking, Stripe for payment processing, Resend for email, Twilio for SMS, Supabase for hosting) under contract, solely to deliver the service you requested.
Joint marketing: A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Orvica does not joint-market.
State law rights
California, Vermont, Nevada, and certain other states provide additional protections. California residents may opt out of the sale or sharing of personal information for cross-context behavioral advertising under the CCPA (Cal. Civ. Code §1798.120). Orvica does not engage in such sale or sharing. California residents may also exercise the right to know, delete, and correct personal information via /account (export and deletion endpoints).
Questions?
Privacy Officer
Orvica LLC
1655 Post Road East, Unit 2802
Westport, CT 06880
privacy@orvica.co