Privacy Policy

Account data: your email address. Sign-in is passwordless: sign-in links are single-use, expire in 15 minutes, and are stored only as hashes.

Financial data you authorize: when you connect a card account, we receive account metadata (account name, type, and masked number) and transaction data (amount, date, merchant, status, category) through our data access provider. We never receive or store your bank login credentials or full account numbers. Connections are read-only: Tori cannot move money in your bank accounts.

Program data: rewards, balances, and redemption records generated by your use of Tori.

To operate the rewards program: identifying eligible transactions, calculating and posting credits, processing redemptions, preventing fraud and abuse, and providing support. We do not sell your personal or financial data. We do not use your financial data for advertising.

You provide consent when you create an account and accept the program terms, and again in the connection flow before any financial data is shared, where our data access provider presents its own consent screen. You may withdraw consent at any time by disconnecting your card or requesting account deletion.

Data is stored with SOC 2 Type II infrastructure providers, encrypted in transit (TLS 1.2+) and at rest. Access is limited to authorized personnel under multi-factor authentication. Full details of our security program are available to partners on request.

Financial connection and transaction data are retained while your connection is active. Disconnecting a card removes the connection with our data provider and deletes the associated access token, with associated raw transaction data deleted within 30 days. You may request full account deletion at any time; ledger records required for financial recordkeeping are retained in de-identified form.

We share data only with the service providers required to operate Tori (hosting, database, background processing, and financial data access), each bound to use it solely to provide their service, and where required by law.

Privacy and deletion requests: email benjamin.jamesq@gmail.com. We will verify and complete requests within 30 days.