Privacy Policy

USURA.IO is operated by CDWJ LLC ("we", "our", or "us"). We are committed to protecting your personal and financial information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. The Service is intended only for individuals 18 years of age or older in the United States. By using USURA.IO, you agree to the practices described here.

Account Information: Your name, email address, and phone number, collected when you register and set up your account.

Financial Data via Plaid: When you connect a financial account, we use Plaid to retrieve account balances, transaction history, credit card details, mortgage data, and loan information. We store this data securely to power the budgeting and tracking features. We never see your banking login credentials.

Payment Data via Stripe: When you subscribe, our payment processor Stripe collects and processes your card details. We do not store full card numbers; we keep only limited billing information such as your plan, subscription status, and processor identifiers.

Messaging Data via Twilio: If you opt in to text messaging, we process your mobile number and the content of messages and images you send us, such as an account screenshot. See our SMS Opt-In and Consent page.

Manually Entered Data: Any income, expense, debt, investment, or goal data you enter directly into the app.

Usage Data: Basic app usage metrics used solely to improve the product. We do not track personal browsing habits.

• To display your financial data, budgets, and insights within the app.
• To sync transactions and balances automatically via Plaid.
• To categorize transactions and read account details from statements or screenshots, using an automated AI model (see below).
• To provide optional coaching you explicitly request and manage your subscription and any discounts you earn.
• To send service-related notifications, such as verification codes, sync alerts, and payment reminders.
• To secure the app, prevent fraud and abuse, and comply with law.

To save you time, transactions and any statement or screenshot images you provide may be processed by an automated AI model to categorize spending or extract account details. This processing is used to populate your account, and you can review and correct any result. We do not use your financial data to train third-party public AI models.

We do not sell, rent, or share your personal or financial information with third parties for marketing purposes, and we do not share it for cross-context behavioral advertising.

Your data may be shared only in these limited circumstances:

• With your consent: If you opt in to share your financial data with a USURA.IO coach for a paid service, that staff member will have read access only to the data you choose to share.
• Service providers: Plaid (bank connections), Stripe (payments), Twilio (text messages, if you opt in), our hosting and data platform, our email provider, and an AI provider that processes transactions and images as described above. Each operates under its own privacy policy.
• Legal requirements: We may disclose information if required by a court order, subpoena, or applicable law, or in connection with a business transfer.

If you opt in to text messages, we use your mobile number only to send the messages described in this policy and on our SMS Opt-In and Consent page. Message frequency varies based on your account activity and the alerts you enable. Message and data rates may apply.

We do not sell, rent, or share your mobile number or your SMS opt-in consent with any third party for their own marketing purposes. We share it only with our messaging provider, Twilio, solely to deliver messages you have requested. Reply STOP to opt out or HELP for help at any time.

All data transmitted between your device and our servers is encrypted using TLS. Financial credentials (bank usernames and passwords) are never stored by us; Plaid handles authentication directly and provides us only with tokenized access.

Access to your account data is protected by authentication and multi-factor verification for sensitive access. Staff can only access your data if you explicitly grant sharing permissions in your Profile settings, under a least-privilege model that limits who can view client data.

• Access & Correction: View and update your personal information at any time in your Profile.
• Disconnect Bank Accounts: Remove any connected institution at any time from the Connect Bank page, which stops future data collection from it.
• Text Messages: Reply STOP at any time to opt out of texts.
• Data Sharing Controls: Control what data is shared with coaches via your Profile settings.
• Account Deletion: Request full deletion of your account and data by emailing privacy@usura.io or through the Support page.
• State Privacy Rights: Depending on where you live (for example, California under the CCPA and CPRA), you may have additional rights to know, delete, correct, and limit the use of your information, and to not be discriminated against for exercising them. To exercise these, contact privacy@usura.io.

When you connect a financial institution, you are also subject to Plaid's end user privacy policy, available at plaid.com/legal. Plaid acts as a data processor on your behalf and does not sell your data.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the app. Continued use of the app after changes constitutes your acceptance of the updated policy.