How Pivox handles your data

Bank connections

Linking a bank is optional. Pivox works with accounts and transactions you enter yourself, and budgets, goals, and insights do not require a connection.

When you do link an account, the connection is handled by Plaid and Yodlee, which import account and transaction data on your authorization. What we share with them is limited to what account linking and transaction retrieval require, and their handling of it is governed by their own privacy policies.

Protecting your data

We use technical and organizational measures including encryption in transit and at rest, limited access controls, dependency scanning, and monitoring. No system is completely secure, so we also maintain an incident response plan to address potential breaches promptly.

Signing in

You can sign in with an email address and password or with Google Sign-In, and two-factor authentication is supported. Keeping your credentials safe is part of your responsibility under our Terms of Service.

What we do with your information

• We do not sell personal information.
• We use trusted vendors for things like analytics and email delivery. They are bound by confidentiality and security obligations and may only use your data to perform services on our behalf.
• Financial data is used to run the features you are using — budgets, transactions, goals, insights — and not repurposed beyond what the Privacy Policy describes.

What you control

• Access, correct, or delete your data from in-app settings, or by contacting us.
• Export copies of your data in CSV or JSON. Export files are automatically purged 30 days after creation.
• Opt out of optional AI features and manage AI data-retention preferences where those controls are offered.
• Withdraw marketing consent at any time in settings or by emailing privacy@pivox.finance.

Reporting a vulnerability

If you believe you have found a security issue, email hello@pivox.finance with enough detail to reproduce it. Please give us a reasonable opportunity to investigate and fix the issue before disclosing it publicly.

What we do not claim

Pivox does not hold a SOC 2 report or any other security certification today, and we will not display a badge for one until it exists. We would rather describe the controls we actually run than imply an audit we have not completed.

The binding versions of these commitments are our Privacy Policy and Terms of Service. Where this page and those documents differ, those documents govern.