Privacy Policy | Naverica

Overview

This Privacy Policy explains how Naverica collects, uses, shares, retains, and protects information when you visit our website, create an account, use Naverica features, contact support, or interact with services made available through our platform.

Naverica provides financial wellness, cash advance, and rewards experiences. Naverica is not a bank, lender, underwriting service, capital provider, prepaid account provider, wallet provider, credit repair company, consumer reporting agency, or financial advisor. We help users connect supported accounts or providers, review product status, manage wellness tools, check whether cash advance features are available, and participate in partner-driven rewards experiences.

We are committed to transparency, accountability, and safeguarding your information. This policy is reviewed at least annually and may be updated to reflect changes in our services, legal requirements, or industry standards.

This policy is intended to be clear and practical. It should still be reviewed by qualified privacy and financial services counsel before launch and whenever Naverica expands products, vendors, states, or data uses.

When you create an account, Naverica may ask you to acknowledge the current Privacy Policy and agree to the current Terms of Use. We may also ask you to acknowledge an updated Privacy Policy or agree to updated Terms before you continue using Naverica if the change is material, affects your rights or obligations, changes how we collect, use, retain, or share information, or if applicable law or product requirements call for renewed acceptance.

Product-specific consents, such as Plaid account-data authorization, payroll connection authorization, rewards consent, repayment authorization, electronic communications consent, subscription terms, or future bill-management authorization, are separate from this general Privacy Policy acknowledgement. We use separate consents when a feature needs more specific permission, provider authorization, or evidence of the exact data use you approved.

Information We Collect

Information You Provide

We may collect information you choose to provide, including:

name, email address, phone number, mailing address, and other contact details;
account sign-in details, password hashes, authentication state, and security preferences;
date of birth and identity-related information when needed for eligibility, compliance, fraud prevention, or partner requirements;
employment, income, payroll, financial, connected account, cash advance, rewards, or product information you submit through secure Naverica feature steps;
support requests, messages, documents, screenshots, survey responses, or other information you send to us;
communication preferences, notification choices, consent records, disclosure acknowledgements, and authorization history;
information you provide when accepting terms, product disclosures, electronic communications consent, repayment authorization, or rewards terms.

Do not send Social Security numbers, bank account numbers, card numbers, passwords, payroll credentials, reset links, or other highly sensitive information through public email, public contact forms, public chat, or unsecured channels.

Information From Connected Accounts And Providers

With your authorization, Naverica may receive information from partners and service providers that help power specific features. This may include:

account, balance, transaction, institution, and connection-status information from connected account providers such as Plaid;
payroll, employment, income, pay timing, account, authorization, and webhook status information from payroll providers such as Atomic;
payment, repayment, customer, payment-method reference, invoice, subscription, dispute, and webhook status information from payment processors such as Stripe;
rewards session, postback, activity, credit, reversal, redemption, payout-status, or partner-event information from rewards providers such as CPX Research and approved payout processes;
application status or partner update information from lending-marketplace providers if that scope is activated and approved.

The exact information depends on the product you use, your consent, the provider’s available data, Naverica’s approved product scope, and applicable law.

When a connected-account or partner feature is optional, we aim to request, use, and retain only the information reasonably needed for the feature you chose, related security and fraud prevention, support, compliance, and recordkeeping. You may be able to disconnect or revoke certain provider permissions through Naverica, the provider, or your financial institution. Disconnecting a provider may limit or stop related features, and some records may still be retained where allowed or required by law, provider rules, dispute handling, security, fraud prevention, audit, or accounting needs.

Naverica is not designed to see or store your online banking credentials, payroll credentials, card security codes, or raw payment card numbers when you connect through approved provider flows. Do not enter those credentials anywhere except inside the secure provider connection screen presented for that purpose.

Information Collected Automatically

When you use our website or app, we may collect:

device, browser, app, operating system, and network information;
IP address and approximate location derived from IP address;
pages viewed, links clicked, referring pages, session activity, and feature usage;
log data, request identifiers, timestamps, error information, and diagnostic information;
cookie, local storage, or similar technology data;
security, fraud, abuse-prevention, and rate-limit signals.

We do not intentionally collect secrets, raw provider payloads, bank credentials, payment credentials, Social Security numbers, or unnecessary sensitive account details through support messages, logs, analytics, or monitoring tools.

Categories Of Sources

We may collect personal information from:

you directly when you create an account, fill out forms, contact support, respond to prompts, accept disclosures, or use product features;
your browser, device, app, or network when you use our website or app;
connected account, payroll, payment, rewards, or other providers you authorize us to use for a requested feature;
service providers that help us operate, secure, message, verify, support, or improve Naverica;
legal, fraud-prevention, or operational sources when needed to protect users, comply with law, or verify account activity.

How We Use Information

We may use information to:

provide, operate, maintain, secure, and improve Naverica;
create, verify, authenticate, and manage your account;
show your product status, account connection state, rewards activity, support history, and other information tied to your account;
support financial wellness features, including connected account review, transaction summaries, budgets, goals, reminders, income-plan settings, and insights;
support cash advance features, including profile setup, payroll or employment review, eligibility-related checks, status updates, repayment steps, disclosures, authorizations, and related operations when available;
support rewards features, including rewards profile setup, consent, partner sessions, activity history, credit tracking, reversals, PayPal or Bank Draft cash-out previews, redemptions, and payout records when available;
verify identity, employment, income, account status, payment status, product eligibility, or provider status where required;
process payments, payouts, repayments, refunds, reversals, disputes, subscriptions, invoices, and reconciliation records;
send transactional messages, account notices, support responses, security alerts, reminder messages, service updates, and legally required notices;
respond to support requests, privacy requests, disputes, complaints, fraud reports, or security reports;
prevent fraud, abuse, unauthorized access, duplicate reward crediting, payment errors, and security incidents;
comply with legal, regulatory, tax, accounting, contractual, audit, and dispute-resolution obligations;
analyze product performance, reliability, safety, and usability;
enforce our terms, policies, agreements, and product rules.

We do not use Plaid-connected wellness data for cash advance eligibility, underwriting, unrelated marketing, rewards targeting, or partner offers unless a future reviewed policy, consent, and privacy notice expressly allow that use.

We may share information with:

financial wellness, payroll, connected account, rewards, payment, payout, application, and other partners involved in a product action you request;
vendors that provide hosting, databases, security, monitoring, analytics, email, SMS, customer support, compliance, fraud prevention, payment processing, billing, infrastructure, and operational services;
professional advisors, auditors, insurers, legal counsel, compliance consultants, and accounting or tax advisors;
government agencies, regulators, courts, law enforcement, payment networks, or other parties when required by law or necessary to protect rights, safety, security, or the integrity of Naverica;
another company as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction;
other parties with your consent, at your direction, or as needed to complete a product action you request.

We do not sell personal information for money. We also do not knowingly sell or share personal information of children under 16.

We do not sell or use connected financial account, payroll, cash advance, repayment, budget, goal, rewards, redemption, or transaction data for behavioral advertising. Some website analytics, cookies, or advertising technologies can be considered a “sale,” “sharing,” or “targeted advertising” under certain state privacy laws. If Naverica uses those technologies, we will provide legally required choices.

Cookies And Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to:

keep the website and app working;
remember preferences;
measure traffic, performance, and reliability;
improve content, navigation, and product experience;
protect against fraud, abuse, account misuse, and security incidents;
understand whether public content and support resources are useful.

You can control cookies through your browser settings. Disabling cookies may affect some features. If legally required, Naverica will provide additional cookie notices or opt-out tools.

Financial, Payroll, Cash Advance, Rewards, Payment, Bill, And Subscription Data

Some Naverica features may involve sensitive financial, employment, payment, or rewards-related data. For example:

financial wellness features may use connected account, transaction, budget, goal, income-plan, reminder, preference, or insight data;
cash advance features may use employment, income, pay schedule, identity, eligibility-related, status, funding, repayment, payment-attempt, and support data;
rewards features may use reward profile, consent, partner session, postback, activity history, credit ledger, reversal, PayPal or Bank Draft cash-out preview, redemption, payout method, and payout status data;
bill and subscription features are not approved for customer-facing production use at this time, but may involve biller, merchant, plan, payment schedule, subscription, or available action data if a future reviewed product scope activates them;
payment and subscription features may use tokenized payment methods, billing identifiers, invoices, subscription status, disputes, refunds, and payment status data.

Rewards credits are promotional benefits that may cash out only through approved PayPal or Bank Draft flows at the moment. They are not bank deposits, prepaid balances, wallet funds, wages, property held for you, or a general-purpose payment account. Rewards are not currently applied to Cash Advances or subscriptions.

Naverica does not intend to store raw payment card numbers, CVV codes, bank account credentials, merchant passwords, payroll credentials, raw provider secrets, or raw webhook payloads by default. Payment credentials should be handled through tokenized provider flows.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. These may include encryption in transit, encryption at rest where appropriate, access controls, authentication controls, secure hosting practices, secrets management, monitoring, vendor security reviews, audit logging, and incident response procedures.

Access to sensitive systems should be limited to people and service providers who need the information to operate, secure, support, or improve Naverica. Internal access should use role-based permissions and multi-factor protections where appropriate.

No system can be guaranteed 100% secure. You are responsible for keeping your account credentials confidential, using secure channels, and telling us promptly if you believe your account or information has been accessed without authorization.

Data Retention, Account Closure, And Deletion

We keep personal information for as long as reasonably necessary to provide services, comply with legal and regulatory obligations, resolve disputes, prevent fraud, process payments or rewards, enforce agreements, maintain audit records, and support business operations.

Retention periods vary based on the type of information, product, legal requirements, provider contract, user relationship, support or complaint status, and operational need. Some records may need to be retained after account closure, including payment records, consent records, repayment authorization evidence, fraud/security records, complaint records, tax/accounting records, audit logs, and legally required records.

When information is no longer needed, we will delete, de-identify, aggregate, or archive it according to our retention practices. Aggregated or de-identified information may be used to analyze, operate, improve, secure, or explain Naverica if it does not identify you.

You may request account closure or deletion by contacting us at privacy@naverica.com or through approved in-app privacy controls when available. Closing an account may not automatically cancel third-party subscriptions, app-store subscriptions, payment obligations, repayment authorizations already in process, or partner obligations unless the applicable product terms say so.

Your Choices

Depending on where you live and the products you use, you may have rights to:

access personal information;
correct inaccurate information;
delete certain information;
receive a portable copy of certain information;
opt out of certain targeted advertising, sale, or sharing practices;
limit certain uses of sensitive personal information where applicable;
withdraw consent for certain connected accounts or optional features;
disconnect supported connected accounts;
close your account.

To make a privacy request, contact us at privacy@naverica.com or use approved in-app privacy controls when available. If you contact support first, we may move the request to the appropriate privacy review path.

We may need to verify your identity before responding. Authorized agents may need to provide proof of authority. Some information may be retained where allowed or required by law. If we cannot fulfill all or part of a request, we will explain the general reason to the extent allowed by law. If applicable law gives you an appeal right, we will describe how to appeal in our response.

Communications

We may send transactional messages related to your account, applications, connected services, financial wellness reminders, security, payments, repayments, rewards, redemptions, subscriptions, support, or legal notices. You may opt out of marketing messages where available, but you may still receive required service, security, support, transactional, or legal communications.

If you provide a phone number, message and data rates may apply depending on your carrier and the message program. Product-specific messaging may require separate consent.

If you choose to enable SMS reminders or text notifications, you agree to receive transactional text messages from Naverica about account notifications, Financial Wellness reminders, and eligible repayment reminders. SMS consent is optional and is not required to create an account or use Naverica. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, START to resume, or HELP for help. Naverica does not use SMS reminders for marketing unless a separate marketing consent is offered and accepted.

Children’s Privacy

Naverica is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us at privacy@naverica.com.

External Links And Third-Party Services

Our website or app may link to third-party websites, apps, partners, providers, or services. Their privacy practices are governed by their own policies. Review those policies before providing information to them.

When you authorize a provider connection, the provider may process information under its own terms and privacy policy. Naverica is not responsible for a third party’s privacy practices except where required by law.

State And Country-Specific Notices

Privacy rights can vary by location. If additional state, federal, or international notices are required for Naverica’s final product scope, Naverica will provide them in this policy or in a separate notice.

If you are entitled to appeal a privacy decision under applicable law, we will explain the available appeal process in our response.

Changes To This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date above shows when this version was last revised. If changes are material, we may provide additional notice as required by law. Continued use of Naverica after an updated policy becomes effective means the updated policy applies to information collected after the effective date, subject to applicable law.

Contact Us

Questions or privacy requests:

Email: privacy@naverica.com
Support: support@naverica.com

Please do not include Social Security numbers, passwords, card numbers, bank account numbers, payroll credentials, reset links, or other highly sensitive information in ordinary email.