Privacy Policy

1. Introduction

Aureus ("Aureus," "we," "our," or "us") is committed to protecting the privacy and security of the personal and financial information entrusted to us by our users. Privacy is a foundational principle of our platform, and we are committed to collecting, using, storing, and protecting information in a transparent and responsible manner.

This Privacy Policy explains how Aureus collects, uses, discloses, stores, and safeguards information when you access or use our website, applications, and related services (collectively, the "Services").

By using the Services, you acknowledge that you have read and understand this Privacy Policy.

1.1 Scope

This Privacy Policy applies to all users of the Aureus Services, including visitors to our website and registered users of the Aureus platform.

This Policy applies to information collected:

Through the Aureus web application.
Through the Aureus website.
Through related applications and services we operate.
Through financial data connections established using Plaid.
Through customer support communications.
Through communications regarding the Services.

This Privacy Policy does not apply to:

Third-party websites or services that are not operated by Aureus.
Financial institutions connected through Plaid.
Information collected directly by Plaid, OpenAI, or other third-party providers under their own privacy policies.

Users should review the privacy policies of third-party providers before using those services.

1.2 Our Privacy Principles

Aureus is built upon the following privacy principles:

Transparency — We clearly explain what information we collect and how it is used.
Data Minimization — We collect only the information reasonably necessary to provide and improve the Services.
Purpose Limitation — Information is used only for legitimate business purposes described in this Privacy Policy.
Security by Design — Security and privacy considerations are incorporated throughout the design and operation of the platform.
User Control — Users maintain control over their financial accounts and may disconnect linked institutions at any time.
Responsible AI — Artificial intelligence features are designed to assist users in understanding their financial information and are subject to safeguards intended to protect user privacy and prevent inappropriate use.

1.3 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, security practices, or business operations.

If we make material changes, we will update the "Last Updated" date at the beginning of this Policy and, where required by law, provide additional notice through the Services or by other appropriate means.

Continued use of the Services following the effective date of an updated Privacy Policy constitutes acceptance of the revised Policy.

2. Information We Collect

Aureus collects information from several sources to provide, maintain, secure, and improve the Services. The categories of information we collect depend on how you interact with the platform and the features you choose to use.

We collect information in the following ways:

Information you provide directly.
Information collected automatically when you use the Services.
Financial information obtained through Plaid with your authorization.
Information generated through your use of the Services.
Information received from third-party service providers.

2.1 Information You Provide Directly

When you create an account or interact with Aureus, you may provide information including:

Account Information

Full name
Email address
Authentication credentials
Account preferences
Profile settings

Communications

If you contact Aureus for support or other inquiries, we may collect:

Your name
Email address
Support requests
Communications with our support team
Information voluntarily included in those communications

You are responsible for ensuring that information you voluntarily provide is accurate and up to date.

2.2 Information Collected Automatically

When you access or use the Services, certain technical information may be collected automatically to help operate, secure, and improve the platform.

This information may include:

Device type
Browser type
Operating system
IP address
Application version
Session identifiers
Log information
Date and time of access
Pages or features accessed
Crash reports and diagnostic information

This information is used for security monitoring, fraud prevention, troubleshooting, analytics, and platform reliability.

2.3 Financial Information Collected Through Plaid

With your explicit authorization, Aureus uses Plaid to access financial information from your connected financial institutions.

Depending on the permissions you authorize and the products enabled, Aureus may receive information including:

Account Information

Financial institution name
Account type
Account subtype
Account nickname
Account balances
Masked account identifiers

Transaction Information

Transaction history
Transaction amounts
Transaction dates
Merchant information
Transaction categories
Pending transactions

Investment Information

Where supported by your connected institution, Aureus may receive:

Investment account holdings
Securities owned
Portfolio balances
Investment transactions
Performance information

Liability Information

Where authorized and supported, Aureus may receive:

Loan balances
Credit card balances
Mortgage information
Student loan information
Payment information

Aureus only requests access to financial information necessary to provide the Services you choose to use.

2.4 Information Generated Through Your Use of the Services

As you use Aureus, the platform may generate additional information including:

Financial health scores
Goal progress
Budget information
Cash flow analysis
Spending trends
Financial insights
Portfolio analytics
User preferences
Saved settings

Some information is derived from financial data you authorize Aureus to access and is generated solely to provide personalized financial insights and educational tools.

2.5 Information from Third-Party Service Providers

Aureus works with trusted third-party service providers to operate the Services.

These providers may supply limited information necessary to support authentication, cloud hosting, analytics, customer support, fraud prevention, security monitoring, and other operational functions.

Aureus does not receive more information than is reasonably necessary to provide the Services.

2.6 Information We Do Not Intentionally Collect

Aureus does not intentionally collect information that is unrelated to providing the Services.

Unless voluntarily provided by a user, Aureus does not intentionally collect:

Government-issued identification numbers
Biometric information
Precise geolocation information
Health information
Information unrelated to financial management

If such information is inadvertently received, Aureus will handle it in accordance with applicable law and internal security policies.

3. Financial Data and Plaid

Aureus uses Plaid Technologies, Inc. ("Plaid") to enable users to securely connect their financial accounts to the Services.

Plaid acts as a third-party technology provider that facilitates secure communication between Aureus and participating financial institutions. Aureus does not collect, receive, or store your online banking usernames or passwords.

By choosing to connect a financial account, you authorize Plaid to access financial information from your selected financial institution and transmit authorized information to Aureus in accordance with your instructions and Plaid's applicable agreements.

3.1 Information Received from Plaid

Subject to your authorization and the capabilities of your financial institution, Aureus may receive information including:

Account Information

Financial institution name
Account type and subtype
Account nickname
Current and available balances
Masked account identifiers

Transaction Information

Transaction history
Transaction amounts
Transaction dates
Merchant information
Transaction categories
Pending transactions

Investment Information

Where supported by your financial institution, Aureus may receive:

Investment holdings
Securities information
Portfolio balances
Investment transactions
Performance-related information

Liability Information

Where authorized and supported, Aureus may receive:

Credit card information
Loan information
Mortgage information
Student loan information
Payment information

The specific information available depends on the products you authorize, the capabilities of your financial institution, and the permissions granted through Plaid.

3.2 How Aureus Uses Plaid Data

Financial information received through Plaid is used solely for legitimate business purposes related to providing the Services.

These purposes include:

Displaying account information.
Aggregating financial information.
Calculating financial health metrics.
Generating financial insights.
Budgeting and cash flow analysis.
Goal tracking.
Investment portfolio monitoring.
Providing personalized financial education.
Improving the accuracy and functionality of the Services.
Detecting fraud, misuse, or unauthorized activity.

Aureus does not use Plaid data for advertising or marketing unrelated products.

3.3 Data Security

Financial information received from Plaid is transmitted using encrypted connections and stored using managed cloud infrastructure that provides encryption at rest.

Access to consumer financial data is restricted to authorized personnel in accordance with Aureus's Information Security Program, role-based access controls, and the principle of least privilege.

3.4 Your Control Over Connected Accounts

You control whether to connect financial accounts to Aureus.

You may disconnect connected financial institutions at any time through the Services, subject to technical limitations and applicable data retention requirements.

Disconnecting an account prevents Aureus from receiving new financial information from that institution. Historical information previously received may continue to be retained as described in this Privacy Policy unless deletion is requested or otherwise required by law.

3.5 Plaid's Privacy Practices

Plaid independently collects, processes, and stores information in accordance with its own privacy practices.

Your use of Plaid is subject to Plaid's privacy policy and any agreements presented during the account connection process.

Aureus encourages users to review Plaid's privacy documentation to better understand how Plaid processes personal and financial information.

4. How We Use Your Information

Aureus uses the information we collect to operate, maintain, secure, and improve the Services. Information is processed only for legitimate business purposes that are consistent with this Privacy Policy and applicable law.

Depending on how you use the Services, Aureus may use your information for the following purposes.

4.1 Providing the Services

We use your information to provide the core functionality of the Aureus platform, including:

Creating and managing user accounts.
Authenticating users and maintaining secure sessions.
Connecting authorized financial accounts.
Displaying financial information and account activity.
Synchronizing data from connected financial institutions.
Maintaining user preferences and settings.

4.2 Financial Analysis and Insights

Aureus uses financial information to generate personalized financial insights and educational tools, including:

Financial health scoring.
Cash flow analysis.
Budget creation and monitoring.
Spending analysis.
Goal tracking.
Net worth calculations.
Investment portfolio monitoring.
Trend analysis and financial summaries.

These insights are intended to help users better understand their financial situation and support informed financial decision-making.

4.3 Artificial Intelligence Features

Aureus may use artificial intelligence technologies to assist users in understanding their financial information and interacting with the Services.

AI features may be used to:

Explain financial concepts.
Summarize financial information.
Answer user questions.
Generate educational content.
Provide contextual financial insights.

Artificial intelligence features are designed to assist users and are not intended to provide legal, tax, accounting, or personalized investment advice.

Where practical, Aureus minimizes the amount of information shared with AI service providers and limits processing to the information necessary to provide the requested functionality.

4.4 Security and Fraud Prevention

We use information to protect our users, systems, and Services, including to:

Detect unauthorized access.
Prevent fraud and abuse.
Investigate suspicious activity.
Monitor platform security.
Respond to security incidents.
Protect customer accounts.
Maintain system integrity.

4.5 Customer Support

Information may be used to:

Respond to customer inquiries.
Troubleshoot technical issues.
Resolve account problems.
Improve support quality.
Communicate regarding your account or the Services.

4.6 Improving the Services

Aureus continuously evaluates how the Services are used to improve reliability, functionality, security, and user experience.

Information may be used to:

Develop new features.
Improve existing functionality.
Analyze platform performance.
Identify software defects.
Enhance usability.
Improve financial models and calculations.

Where possible, Aureus uses aggregated or de-identified information for product improvement and analytics.

4.7 Communications

Aureus may use your information to communicate with you regarding:

Account activity.
Security alerts.
Service announcements.
Product updates.
Changes to our policies.
Customer support requests.

Where required by law, users may opt out of non-essential marketing communications. Users cannot opt out of communications that are necessary for security, legal compliance, or operation of the Services.

4.8 Legal and Regulatory Compliance

Aureus may use information as necessary to:

Comply with applicable laws and regulations.
Respond to lawful requests from governmental authorities.
Enforce our Terms of Service.
Protect the rights, safety, and property of Aureus, our users, and others.
Establish, exercise, or defend legal claims.

4.9 Business Operations

Information may also be used to support the ordinary operation of the business, including:

Maintaining internal records.
Conducting audits.
Performing risk management activities.
Enforcing internal policies.
Supporting corporate governance.
Protecting business continuity.

Aureus will not use personal information for purposes materially different from those described in this Privacy Policy without providing additional notice or obtaining consent where required by applicable law.

5. Sharing and Disclosure of Information

Aureus values the privacy of its users and carefully limits the circumstances under which personal and financial information is shared.

Aureus does not sell consumer personal information or consumer financial information.

Information is disclosed only when necessary to provide the Services, comply with legal obligations, protect the security of the platform, or as otherwise described in this Privacy Policy.

5.1 Service Providers

Aureus shares information with trusted third-party service providers that perform services on our behalf.

These providers may include organizations that provide:

Cloud hosting and infrastructure
User authentication
Financial data connectivity
Artificial intelligence services
Customer support
Security monitoring
Error reporting
Analytics
Email communications

Service providers are granted access only to the information reasonably necessary to perform their contracted services and are expected to protect that information in accordance with applicable contractual obligations and industry-standard security practices.

5.2 Financial Data Providers

When you choose to connect financial accounts, Aureus exchanges information with Plaid and your connected financial institutions as necessary to provide authorized Services.

Information exchanged through Plaid is subject to your authorization, Plaid's applicable agreements, and the policies of your financial institution.

5.3 Legal Requirements

Aureus may disclose information when we believe disclosure is necessary to:

Comply with applicable laws or regulations.
Respond to valid legal process, including subpoenas, court orders, or lawful governmental requests.
Protect the rights, safety, and property of Aureus, our users, or others.
Detect, investigate, or prevent fraud, security incidents, or illegal activity.
Enforce our Terms of Service or other agreements.

Where legally permitted and appropriate, Aureus may seek to limit or challenge requests for information that are overly broad or not legally required.

5.4 Business Transactions

If Aureus is involved in a merger, acquisition, financing, corporate reorganization, sale of assets, or similar business transaction, user information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

Users will be notified where required by applicable law.

5.5 With Your Direction

Aureus may disclose information when you expressly request or authorize us to do so.

Examples include:

Connecting third-party financial services.
Exporting financial information.
Sharing reports generated through the Services.
Integrating with third-party applications that you choose to use.

5.6 Aggregated and De-Identified Information

Aureus may use or disclose aggregated, anonymized, or de-identified information that cannot reasonably be used to identify an individual.

Such information may be used for:

Statistical reporting
Product improvement
Research
Performance analysis
Business planning

Aureus will not knowingly attempt to re-identify de-identified information.

5.7 Information We Do Not Share

Except as described in this Privacy Policy, Aureus does not disclose your personal or financial information to third parties for their independent marketing purposes.

Aureus does not sell consumer financial information.

Aureus does not share your proprietary Aureus Financial Health Score with third parties without your authorization.

5.8 International Transfers

If information is transferred to service providers located in jurisdictions outside your country of residence, Aureus will take reasonable steps to ensure that appropriate safeguards are implemented consistent with applicable privacy laws and contractual obligations.

6. Data Security, Storage, and Retention

Aureus is committed to protecting the confidentiality, integrity, and availability of the information entrusted to us. We maintain administrative, technical, and physical safeguards designed to protect personal and financial information against unauthorized access, disclosure, alteration, or destruction.

While no method of transmission or electronic storage can be guaranteed to be completely secure, Aureus continually evaluates and improves its security practices to address evolving risks.

6.1 Security Measures

Aureus maintains an information security program that includes policies, procedures, and technical safeguards designed to protect customer information.

Security measures include, where applicable:

Encryption of data in transit using TLS.
Encryption of data at rest.
Role-based access controls (RBAC).
Principle of least privilege.
Multi-factor authentication for privileged administrative accounts.
Secure authentication services.
Network and infrastructure security controls.
Security monitoring and logging.
Incident response procedures.
Regular security reviews and risk assessments.
Secure software development practices.

Security controls are periodically reviewed and updated as the platform evolves.

6.2 Data Storage

Customer information is stored using managed cloud infrastructure selected to provide appropriate security, reliability, and availability.

Access to stored information is restricted to authorized personnel with a legitimate business need and is governed by Aureus's Access Control and Identity Management Policy.

Aureus does not store users' online banking usernames or passwords.

6.3 Data Retention

Aureus retains personal and financial information only for as long as reasonably necessary to:

Provide the Services.
Maintain user accounts.
Comply with legal or regulatory obligations.
Resolve disputes.
Enforce agreements.
Protect the security and integrity of the Services.
Maintain appropriate business records.

Retention periods may vary depending on the type of information and applicable legal requirements.

6.4 Account Deletion

Users may request deletion of their Aureus account in accordance with applicable law.

Upon receiving a valid deletion request, Aureus will take reasonable steps to delete or de-identify personal information, unless retention is required or permitted by law, necessary to resolve disputes, protect against fraud, enforce agreements, or satisfy legitimate business or regulatory obligations.

Certain information may remain in backup systems for a limited period as part of standard disaster recovery and business continuity processes.

6.5 Data Disposal

When personal information is no longer required, Aureus will securely delete, de-identify, or otherwise dispose of the information using methods appropriate to the nature of the data and the storage medium.

6.6 Incident Response

Aureus maintains documented procedures for responding to actual or suspected security incidents involving personal or financial information.

These procedures include processes for:

Identifying and containing incidents.
Investigating the scope and impact of an incident.
Remediating identified issues.
Recovering affected systems.
Notifying affected parties and regulatory authorities where required by applicable law.

6.7 User Responsibilities

Users also play an important role in protecting their information.

Users are encouraged to:

Maintain strong, unique passwords.
Enable multi-factor authentication where available.
Protect their account credentials.
Keep their devices and software up to date.
Promptly notify Aureus of suspected unauthorized access to their account.

Failure to follow recommended security practices may increase the risk of unauthorized access to user accounts.

7. Your Privacy Rights

Aureus believes users should have meaningful control over their personal information. Depending on your location and applicable law, you may have certain rights regarding the personal information Aureus collects and processes.

These rights may include the following.

7.1 Right to Access

You may request confirmation of whether Aureus processes your personal information and request access to the personal information we maintain about you, subject to applicable legal exceptions.

7.2 Right to Correct

If you believe personal information maintained by Aureus is inaccurate or incomplete, you may request that it be corrected or updated.

Users may also update certain account information directly through their account settings.

7.3 Right to Delete

You may request deletion of your personal information, subject to applicable legal, regulatory, contractual, and operational obligations.

Aureus may retain certain information where retention is required or permitted by law, including for fraud prevention, dispute resolution, security, tax, accounting, audit, or other legitimate business purposes.

7.4 Right to Data Portability

Where required by applicable law, you may request a copy of certain personal information you have provided to Aureus in a structured, commonly used, and machine-readable format.

7.5 Right to Withdraw Consent

Where Aureus relies on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing that occurred before the consent was withdrawn.

Please note that withdrawing consent for certain processing activities may limit your ability to use some features of the Services.

7.6 Right to Disconnect Financial Accounts

You may disconnect linked financial institutions at any time through the Services.

Disconnecting a financial institution will stop future synchronization of financial information from that institution. Previously collected information may continue to be retained as described in this Privacy Policy unless deletion is requested or otherwise required by applicable law.

7.7 Marketing Communications

Where permitted by law, Aureus may send users information regarding product updates or other communications.

Users may opt out of non-essential marketing communications at any time by using the unsubscribe instructions included in the communication or by contacting Aureus.

Users cannot opt out of communications necessary for account security, legal compliance, or operation of the Services.

7.8 Exercising Your Rights

To exercise any applicable privacy rights, users may contact Aureus using the contact information provided at the end of this Privacy Policy.

To protect user privacy and prevent unauthorized disclosure, Aureus may request additional information to verify the identity of the individual making the request before fulfilling certain requests.

7.9 Limitations

Certain privacy rights may be limited by applicable law.

Aureus may decline requests where permitted by law, including where fulfilling a request would:

Prevent compliance with legal obligations.
Interfere with fraud prevention or security investigations.
Infringe upon the rights of others.
Reveal confidential business information or trade secrets.
Prevent Aureus from providing requested Services.
Otherwise fall within an applicable legal exception.

Where required by law, Aureus will explain the basis for denying a request.

7.10 State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws, including rights related to:

Accessing personal information.
Correcting inaccurate information.
Deleting personal information.
Obtaining copies of personal information.
Opting out of certain types of data processing where applicable.
Appealing decisions regarding privacy rights requests, where required by law.

Aureus will honor applicable state privacy rights in accordance with the laws governing the user's jurisdiction.

8. Cookies and Similar Technologies

Aureus uses cookies and similar technologies to operate, secure, and improve the Services.

Cookies are small text files that are stored on your device when you visit a website. Similar technologies may include local storage, pixels, tokens, software development kits (SDKs), and other technologies that perform comparable functions.

8.1 Types of Cookies We Use

Essential Cookies

Essential cookies are necessary for the operation of the Services and cannot be disabled through the platform.

These cookies may be used to:

Authenticate users.
Maintain secure login sessions.
Remember security settings.
Protect against fraudulent activity.
Enable core website functionality.

Without these cookies, certain features of the Services may not function properly.

Functional Cookies

Functional cookies help remember user preferences and improve the user experience.

These cookies may be used to remember:

User preferences.
Display settings.
Language preferences.
Other personalization settings.

Analytics Cookies

Aureus may use analytics technologies to better understand how users interact with the Services.

Analytics information may include:

Pages visited.
Features used.
Session duration.
Navigation patterns.
Device information.
Performance metrics.
Error reports.

Where practical, Aureus seeks to use aggregated or de-identified analytics information to improve the Services.

8.2 Third-Party Technologies

Certain third-party service providers used by Aureus may place or access cookies or similar technologies in connection with providing their services.

Examples may include providers supporting:

Authentication.
Cloud infrastructure.
Analytics.
Customer support.
Security monitoring.

These technologies are governed by the privacy practices of the applicable third-party provider.

8.3 Managing Cookies

Most web browsers allow users to:

View stored cookies.
Delete cookies.
Block certain cookies.
Configure cookie preferences.

Please note that disabling essential cookies may prevent portions of the Services from functioning correctly.

8.4 Do Not Track

Some web browsers offer a "Do Not Track" ("DNT") setting.

Because there is currently no universally accepted standard governing how websites should respond to DNT signals, Aureus does not currently respond differently based solely on a browser's DNT setting.

Users may continue to manage cookies through their browser settings or other available privacy controls.

8.5 Future Technologies

As Aureus introduces new features or technologies, additional cookies or similar technologies may be used where appropriate to support the functionality, security, and reliability of the Services.

If the purposes for which these technologies are used change materially, Aureus will update this Privacy Policy and provide additional notice where required by applicable law.

9. Children's Privacy

The Services are intended for individuals who are at least 18 years of age or the age of majority in their jurisdiction, whichever is greater.

Aureus does not knowingly collect, solicit, or maintain personal information from children under the age of 13, and the Services are not directed to children.

If Aureus becomes aware that personal information has been collected from a child under the age of 13 without verifiable parental consent, we will take reasonable steps to delete that information as soon as practicable, unless retention is required by applicable law.

If you believe that a child has provided personal information to Aureus, please contact us using the contact information provided at the end of this Privacy Policy so that we may investigate and take appropriate action.

Parents and legal guardians who believe their child has submitted personal information may request that Aureus review, correct, or delete such information, subject to applicable law.

Aureus does not knowingly permit children to create user accounts or use the Services.

10. International Users

Aureus is headquartered in the United States and primarily provides its Services to users located within the United States.

If you access or use the Services from outside the United States, you acknowledge that your personal information may be transferred to, processed in, and stored in the United States or other jurisdictions where Aureus or its trusted service providers operate.

The data protection laws of these jurisdictions may differ from those in your country of residence and may not provide the same level of protection.

Aureus takes reasonable steps to protect personal information transferred across borders by implementing appropriate administrative, technical, and contractual safeguards consistent with applicable law.

Where required by applicable law, Aureus will implement additional safeguards for international data transfers.

If you do not wish for your information to be transferred to or processed in the United States, you should discontinue use of the Services.

Nothing in this section limits any rights you may have under applicable privacy or data protection laws.

11. Changes to This Privacy Policy

Aureus may update this Privacy Policy from time to time to reflect changes in our Services, business practices, legal obligations, security practices, or applicable laws and regulations.

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.

If we make material changes that significantly affect how we collect, use, disclose, or protect personal information, Aureus will provide additional notice where required by applicable law. Such notice may be provided through the Services, by email, or through other reasonable means.

We encourage users to review this Privacy Policy periodically to remain informed about how Aureus protects personal information.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy, except where applicable law requires additional consent.

12. Additional U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights regarding their personal information under applicable state privacy laws.

Where these laws apply, Aureus will honor applicable requests in accordance with the requirements of the governing law.

Depending on your state of residence and applicable law, you may have the right to:

Confirm whether Aureus processes your personal information.
Access personal information maintained by Aureus.
Correct inaccurate personal information.
Delete personal information.
Obtain a portable copy of certain personal information.
Withdraw consent where processing is based on consent.
Appeal the denial of certain privacy rights requests, where applicable.
Opt out of certain forms of processing, including targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects, where such rights are provided by law.

Aureus does not sell personal information or consumer financial information.

Aureus does not use personal information for targeted advertising in a manner that would require an opt-out under applicable state privacy laws.

If Aureus's business practices change in the future, this Privacy Policy will be updated accordingly.

12.1 Exercising State Privacy Rights

Eligible users may exercise applicable privacy rights by contacting Aureus using the contact information provided in this Privacy Policy.

To protect customer privacy and prevent unauthorized disclosure, Aureus may verify the identity of the individual submitting a request before fulfilling certain requests.

Aureus will respond to verified requests within the timeframes required by applicable law.

12.2 Appeals

Where required by applicable law, users whose privacy rights requests have been denied may submit an appeal using the contact information provided in this Privacy Policy.

Aureus will review and respond to appeals in accordance with applicable legal requirements.

Where applicable law requires Aureus to provide information regarding additional avenues of review or complaint, Aureus will include such information in its response.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or Aureus's privacy practices, please contact us using one of the methods below.

Privacy Inquiries

Aureus Money, LLC

Email: privacy@aureus.app

Website: https://www.aureusmoney.io

Mailing Address:

Aureus Money, LLC
United States
(Physical mailing address available upon request at the privacy email above.)

Privacy Rights Requests

Requests to access, correct, delete, or otherwise exercise applicable privacy rights may be submitted using the contact information above.

To protect the privacy and security of our users, Aureus may request additional information to verify the identity of the individual making the request before fulfilling certain requests.

Aureus will respond to verified requests within the timeframes required by applicable law.

Security Reporting

If you believe you have identified a security vulnerability affecting Aureus or wish to report a suspected security incident, please contact:

Email: security@aureus.app

Please do not include sensitive personal information, passwords, or confidential financial information in unsecured email communications.

Aureus appreciates responsible disclosure of potential security vulnerabilities and will investigate reported issues in accordance with its Information Security Program.