Data Retention Policy

Overview

Opturna collects and retains user data only for the limited purposes necessary to operate its financial planning and business intelligence services. When a user connects a financial account through Plaid, Opturna receives selected account and transaction information through Plaid's secure infrastructure. Opturna does not collect or store a user's online banking username, password, or security challenge responses.

Data We May Retain

• Basic account profile information, such as name, email address, business name, and plan details.
• Connected account metadata, such as institution name, account type, masked account identifier, and Plaid item metadata.
• Financial data needed to provide the service, including balances, transactions, and derived categorizations.
• Consent records, security logs, deletion requests, and support interactions.

Retention Schedule

Deletion and De-identification

Users may request deletion of their Opturna account at any time from within account settings or by emailing admin@opturnatech.com. Once a deletion request is initiated, Opturna will:

• Revoke or sever active Plaid-linked connections associated with the account.
• Queue user profile data and linked service data for deletion.
• Complete production-data deletion within 30 days unless a shorter period is operationally available.
• Purge residual backup copies on a rolling basis within 60 days.
• Retain only the minimum records needed for legal compliance, fraud prevention, or dispute resolution.

User Rights

Users may request access, correction, deletion, or disconnection of linked account data as described in the Privacy Policy and product settings.

Legal Retention Exceptions

Opturna may retain limited information where required to comply with law, resolve disputes, enforce agreements, detect abuse, or complete security investigations. Any such retained information will be limited to what is necessary for the purpose.