Your privacy is our
core protocol.

Last updated: January 2026

Privacy
as Infrastructure.

We don't just "have" a policy. We've built ZorvaPulse with privacy as a foundational architectural layer.

Zero Bank-Sync

No bank scraping. No plumbing your data into marketplace aggregators. You control every bit of data entry.

Absolute Secrecy

We never sell, rent, or monetize your wealth profile. Not to advertisers, not to any third-party providers.

Encrypted Vault

PostgreSQL data is encrypted at rest and in transit. Your records are isolated via database-level Row-Level Security.

Data Portability

Export your entire history as CSV or PDF at any time. Your data is never locked into the platform.

Instant Erasure

Permanent account deletion and data wipe-out in a single click. We don't retain ghost records.

The Security Checkpoint

Most finance platforms rely on "Read-Only" bank access. We believe even "Read-Only" is too much access.

Industry Standard

Traditional Wealth Apps

Link accounts, store broker credentials, grant access to transaction history, and consent to automatic data scraping.

Our Protocol

ZorvaPulse

High-fidelity manual entry and private CSV imports. We never request bank credentials or touch your external accounts.

01. Collection Engine

Account Sign-on

Google OAuth or Credentials. Solely for authentication.

Wealth Vectors

Assets, Values, Currencies, and Goals as provided by you.

Basic Analytics

Anonymous usage patterns. No marketing trackers.

02. Purpose of Processing

Compute Engine

To calculate your net worth and asset rebalancing suggestions.

Audit Trail

To maintain your account history and generation logs.

Essential Alerts

Password resets and strategic drift signals.

Technical Specification

Data Persistence

PostgreSQL with at-rest encryption.

Data Isolation

Prisma Row-Level Security (RLS) enforcement.

Access Control

Google OAuth & Auth-JS secure session tokens.

Security Headers

Strict CSP and Rate-Limiting across all endpoints.

03. User Sovereignty (DPDPA)

Right to absolute access of your own records.

Right to instant account and data erasure.

Right to withdrawal of processing consent.

Right to unrestricted data portability (CSV/PDF).

04. Children's Data

ZorvaPulse is restricted to individuals 18+. We do not knowingly harvest data from minors. Any discovered minor accounts are purged immediately.

05. Cookie Protocol

We use a single session-only cookie for secure authentication. No tracking pixels. No 3rd-party advertising hooks. That is it.

06. Breach Notification

In the event of a data breach, we will notify you via registered email and report to the Data Protection Board of India as required by DPDPA 2023.

07. Protocol Changes

Policy updates are posted here with revised timestamps. Our core promise—zero data monetization—remains immutable regardless of document version.

08. Legal Inquiry

Reach out to our privacy desk for any sovereign data concerns at support@zorvapulse.com.