Privacy Policy

Last updated: April 2, 2026

1. Information We Collect

Account data: Email address and hashed password when you create an account.

Financial inputs: Debt balances, APRs, minimum payments, income, credit score, and home equity that you voluntarily enter for optimization analysis. This data is processed server-side and stored only if you create an account.

Usage data: API request logs including timestamps, endpoints accessed, and response codes. No financial input data is included in request logs.

2. How We Use Your Data

  • To compute and deliver debt payoff strategy optimizations
  • To maintain your saved plans and track payoff progress
  • To enforce API rate limits and subscription tiers
  • To improve the accuracy of our optimization models

3. Data Sharing

We do not sell your personal or financial data. We share data only with:

  • Stripe: Payment processing (email and subscription tier only)
  • Cloudflare: Infrastructure provider (encrypted in transit and at rest)
  • Law enforcement: Only when legally compelled with valid process

4. CCPA Rights (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect and why
  • Request deletion of your personal information
  • Opt out of any sale of personal information (we do not sell data)
  • Non-discrimination for exercising your privacy rights

To exercise your deletion rights, use the account deletion feature or contact privacy@smarttechinvest.com. We process requests within 45 days per CCPA requirements.

5. Data Retention

Account data is retained until you delete your account. Anonymized, aggregated usage statistics may be retained indefinitely for product improvement. API request logs are retained for 90 days.

6. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Passwords are hashed with bcrypt. Financial inputs submitted without an account are not persisted beyond the session.

7. Cookies

Kovarino uses only essential session cookies for authentication. We do not use tracking cookies, third-party analytics, or advertising pixels.

8. Children

Kovarino is not intended for users under 18. We do not knowingly collect data from minors.

9. Contact

For privacy inquiries, contact privacy@smarttechinvest.com.