Privacy Policy
Last updated: April 25, 2026
1. What We Collect
Torv collects only what is needed to deliver the service:
- Account email and authentication credentials
- Tax profile information you enter (filing status, state, deductions)
- Categories, rules, and contribution goals you create
- Financial-institution data you authorize us to access through our aggregation provider: account balances and metadata, transactions, investment holdings and activity, and liability information
2. How We Use It
To generate your financial statements, tax projections, retirement analyses, and the other features of the service. That is all.
We do not sell your data. We do not share it with third parties for marketing, advertising, or any purpose unrelated to delivering the service to you.
3. Service Providers
- Quiltt (powered by MX and Finicity) provides bank data aggregation. You authenticate to your financial institutions in their secure widget; your bank credentials are never stored by Torv. See Quiltt's Privacy Policy.
- Infrastructure providers in the United States host our application, database, and email. They process your data only as needed to operate the service and are bound by confidentiality and security obligations.
4. Security
We use industry-standard encryption in transit and at rest. Personally identifiable fields are additionally encrypted at the application layer before storage. No system is perfectly secure; use a strong, unique password and enable multi-factor authentication.
5. Your Rights
You may at any time:
- Export your data
- Delete individual records or your entire account
- Disconnect any linked financial institution
- Reach us through our contact form to exercise any of these rights, including the rights granted by the California Consumer Privacy Act
When you delete your account, your data is purged from our systems.
6. Connected Financial Institution Data
Data retrieved from your financial institutions through Torv is for personal informational and planning purposes and does not represent the official record of your accounts. Refer to your institution for official records.
You may disconnect any institution from inside Torv at any time. You may also revoke access through your institution's own settings. Torv cannot move money or transact on your behalf.
7. GLBA Notice
To the extent the Gramm-Leach-Bliley Act applies, Torv collects nonpublic personal financial information from your connected institutions as described above. We do not disclose it to nonaffiliated third parties except as necessary to deliver the service, as permitted by law, or with your consent.
8. Changes
We may update this policy. Material changes will be communicated by email or in-app notification before they take effect.