Privacy Policy

1. Scope and current availability

This policy covers our website, accounts, content, and available workspace features. The platform is currently a development preview. Features may be unavailable, and you should not upload real sensitive financial, tax, identification, or account records during the preview. A feature described below applies only when it is made available and you choose to use it.

2. Information you provide

We receive your account name, email address, registration and verification details, language preference, and information you submit in posts, profiles, inquiries, support messages, assessments, and workspace records. If an upload feature is available, this may include documents and metadata. Password authentication uses password hashes rather than storing your password in readable form. Do not submit bank login passwords, one-time codes, trading API keys, private keys, or recovery phrases.

3. Google sign-in

If you choose Google sign-in, we receive your Google account identifier, name, email address and verification status, and profile picture when provided. We use these details to authenticate you, maintain your account, and display your identity within authorized features. We store the resulting account association and authentication credentials needed for the integration; OAuth tokens stored by the authentication service are encrypted. We request only basic identity permissions (openid, email, and profile), not Gmail, Google Drive, contacts, calendars, or financial account access. We do not sell Google user data, use it for personalized advertising, or use it to train shared AI models. Use and transfer of Google user data are subject to the Google API Services User Data Policy, including applicable Limited Use requirements. You can revoke our Google access in your Google Account settings; revoking access does not by itself delete your Ordiva Wealth account or previously stored information. To request deletion, contact support@ordivawealth.com.

Google API Services User Data Policy

4. WeChat and other sign-in choices

If WeChat website sign-in is enabled and you choose it, we receive the identifiers and profile information returned by WeChat, such as an OpenID or UnionID, nickname, and profile image. WeChat does not supply a verified contact email for this flow; first-time users must add and verify a real email before accessing a workspace. A temporary internal identifier is not treated as a verified email. Matching email addresses do not automatically merge different sign-in identities. Each identity provider also processes information under its own policies.

5. Usage information, cookies, and search

We use first-party cookies or equivalent session mechanisms for authentication, security, language preference, and limited source and navigation measurement. Public-content and resource searches may be recorded with the query, result count, category, timing, and source category for up to 30 days without an associated account identifier. Public page and content measurement may include viewed content, time, source category, and a short-lived anonymous session identifier. Discussion and private searches use de-identified summaries rather than stored raw search text. Such public records can still contain personal information if you type it into a public search box, so avoid entering sensitive information. Private workspaces, groups, messages, assessments, and administrative pages are excluded from third-party analytics. We do not currently enable third-party advertising trackers. Hosting, network, and authentication providers may process technical information necessary to deliver and protect their services. Blocking essential cookies may prevent sign-in.

6. How we use information

We process information to create and protect accounts, provide the features you request, enforce access permissions, deliver requested verification or password-reset messages, respond to support requests, moderate reported content, prevent abuse, maintain records, and improve available services. We do not sell personal information or share it for cross-context behavioral advertising. Private financial records, private group content, and personal memories are not used for advertising audiences, lead sales, or shared model training.

7. Visibility and authorized access

Public posts and enabled public profiles can be seen by others and may be indexed by search engines. Private group content is limited to authorized active members; a group owner does not receive access to members’ private financial workspaces. Household and professional relationships, subscriptions, or payments do not automatically grant access to private records. Authorized staff may access information within their assigned support, moderation, or verification scope. Assessment records have a specific operational exception: authorized assessment records reviewers may read user identifiers and names, questionnaire versions, dates, frozen scores, and interpretations for operations and quality review, with access auditing; this does not grant access to financial originals, account directories, or private groups. Consider the audience before posting; we cannot control independent copies made by authorized recipients.

8. Service providers and other disclosures

We disclose information as necessary to service providers that support hosting, storage, email delivery, authentication, security, and other enabled functions, subject to their assigned purpose and access controls. We may disclose information when reasonably necessary to comply with law, protect rights and safety, or investigate abuse. If a business transfer affects personal information, applicable notice and consent requirements will apply. We do not provide private documents to an AI provider merely because you created an account. Any enabled AI feature must disclose its relevant data use before you choose to submit information.

9. Retention and security

We retain account and submitted information for the operation of your account and the purposes described here, subject to deletion requests and applicable legal, fraud-prevention, dispute, and audit needs. Public search and navigation measurement described above is retained for up to 30 days; other retention depends on the category and purpose. Deleted information may remain in restricted backups until those backups expire; restoration must preserve applicable deletion and access-revocation decisions. We use access controls and appropriate security measures; certain private originals and credentials are encrypted. No internet service can guarantee absolute security. We do not claim that every field or message is end-to-end encrypted.

10. Your choices and privacy requests

You may manage available profile and content settings, stop using an optional provider, and ask us to access, correct, export, or delete information associated with you. Depending on applicable law, you may also have rights to know about collection and disclosures, limit certain uses of sensitive information, or appeal a decision where required. Email support@ordivawealth.com with the subject ‘Privacy request’. We will take reasonable steps to verify your identity and respond under applicable law; do not send passwords or sensitive original documents for verification. We will not discriminate against you for exercising applicable privacy rights. Some records may need to be retained for legal or security reasons, which we will explain when applicable. Public copies held by other people or search engines may require separate requests.

11. Location and international processing

The service is intended for United States operations. Depending on the approved deployment and service providers, information may be processed in locations different from where you live. A domain name does not establish data residency. We will provide appropriate notice and safeguards where required; enabling a new region or provider must be assessed before private information is sent there.

12. Age, changes, and contact

The service is intended for adults aged 18 and older and is not directed to children. If you believe a child has provided personal information, contact us. We may update this policy and will post the revised date; material changes will receive additional notice and consent where required. Contact Ordiva Wealth at support@ordivawealth.com for privacy questions or requests.