Democratizing Financial Intelligence.
Governed by Absolute Integrity.

Last Updated: June 5, 2026

Aura Finance ("we," "our," "us") is dedicated to protecting your individual data sovereignty. This Privacy Policy outlines the comprehensive legal and technical mechanisms governing how we process, protect, retain, and safely destroy personal data under the General Data Protection Regulation (GDPR) and the Payment Services Directive (PSD2).

ARTICLE 1: DATA CONTROLLER & INITIAL CONTACT

The data controller responsible for processing personal data through the Aura Finance platform is [영문 개인사업자 상호명 또는 본인 영문 성명 입력], located at [영문 사업장 주소 입력]. Official communications regarding user rights, encryption compliance, and data governance must be routed directly to the designated Data Protection Officer (DPO) via email at: [비즈니스 이메일 주소 입력].

ARTICLE 2: CATEGORIES OF FINANCIAL DATA PROCESSED VIA OPEN BANKING

To deliver read-only 3D financial analytics, Aura Finance collaborates with Tink AB (Reg. No. 556898-2192), a licensed Account Information Service Provider (AISP). Upon explicit user authorization, our systems ingest the following structured datasets:

• Account Identifiers: Account holder name, International Bank Account Number (IBAN), BIC, bank name, and specific account currency markers.
• Transactional Histories: Historical transaction logs up to 24 months, including timestamp metrics, accurate transaction amounts, merchant descriptions, and payment categorization codes.
• Balance Metrics: Real-time book balances, authorized overdraft limits, and current available liquid funds across checked accounts.

CRITICAL PROTOCOL NOTICE: Aura Finance never requests, intercepts, captures, or processes your primary online banking credentials (passwords, PINs, multi-factor authentication codes). All authentication procedures are redirected securely to your native banking provider via OAuth 2.0 API frameworks.

ARTICLE 3: PURPOSES OF DATA PROCESSING & LEGAL BASIS

We process your data strictly under the mandate of Article 6(1)(a) of the GDPR (Explicit Consent) and Article 67 of the PSD2. Data processing is limited to:

• Generating automated, real-time 3D algorithmic asset visualizations.
• Executing transactional classification logic for expense reporting.
• Flagging micro-economic inefficiencies and anomaly spending indicators.

ARTICLE 4: DATA RETENTION, CACHING, AND CRITICAL DESTRUCTION MECHANISMS

Our infrastructure operates on a strict non-custodial, temporary-cache structure to prevent long-term data exposure vectors:

• Volatile Memory Caching: Core transactional logs retrieved via the Tink API are parsed primarily in volatile RAM structures. Financial records required for active chart generation are cached in highly restricted, isolated server databases utilizing AES-256 GCM encryption algorithms with rotating keys.
• Instant Deletion Upon Revocation: You hold the absolute right to terminate data processing. The moment you trigger the "Disconnect Account" or "Delete My Profile" command within the app configuration, an automated API webhook transmits a total purge instruction across our server arrays. All aggregated transaction streams and cached indexes are permanently and irreversibly overwritten using cryptographic data erasure standards within 30 seconds.
• Inactivity Purge: If an account remains inactive for a rolling period exceeding 90 consecutive days, all associated open-banking data caches are systematically scrubbed from our active data layers.

ARTICLE 5: YOUR RIGHTS UNDER THE GDPR

As a European or global citizen under GDPR protections, you retain the Right of Access (Art. 15), Right to Rectification (Art. 16), Right to Erasure / Right to be Forgotten (Art. 17), Right to Restriction of Processing (Art. 18), and Right to Data Portability (Art. 20). To exercise any of these privileges, submit a signed cryptographic identity verification request to [비즈니스 이메일 주소 입력]. Responses will be finalized within 72 hours.

Last Updated: June 5, 2026

Welcome to Aura Finance. By initializing an account profile, connecting external bank accounts, or utilizing our 3D spatial analytics software, you explicitly agree to enter into a legally binding contractual relationship with [영문 개인사업자 상호명 또는 본인 영문 성명 입력] governing your use of our platform.

ARTICLE 1: SCOPE OF TECHNICAL SERVICE PROVIDER (TSP) ROLE

Aura Finance acts strictly as a non-regulated Technical Service Provider (TSP). We do not act as an Account Information Service Provider (AISP) or a Payment Initiation Service Provider (PISP). The open-banking aggregation services are technically facilitated exclusively by Tink AB, a regulated Swedish FinTech company under the supervision of the Swedish Financial Supervisory Authority (Finansinspektionen).

ARTICLE 2: NON-CUSTODIAL LIMITATIONS & TRANSACTIONAL RESTRICTIONS

Our platform architecture is completely Read-Only and Non-Custodial:

• Our software cannot execute funds transfers, payment settlements, financial liquidations, or investment capital routing.
• The system lacks any functional capacity to alter structural ledger data inside your native bank account.
• Users are prohibited from attempting to bypass read-only code constraints. Any effort to inject payment scripts will result in immediate protocol suspension.

ARTICLE 3: ABSOLUTE FINANCIAL ADVISORY DISCLAIMER

Aura Finance leverages automated artificial intelligence logic to categorize transactions and model hypothetical asset trajectories. We do not provide certified legal, tax, fiduciary, or personal investment advice. The insights, visualizations, and projected roadmap numbers generated by the AI engine are for illustrative and informational use only.

All micro-economic, lifestyle spending, or commercial investment decisions executed by you are undertaken at your sole discretion and individual liability. Aura Finance cannot be held accountable for any investment losses, asset depreciation, or overdraft expenses resulting from your reliance on our software metrics.

ARTICLE 4: COMPLIANT BANK ACCOUNT AUTHORIZATION

By connecting any account via our Tink Open Banking module, you explicitly affirm that you are the lawful owner of said account, or possess unrestricted, legally valid power of attorney to access and analyze structural balance data. Accessing third-party accounts without authorization constitutes a material breach of this contract and may violate international cybersecurity statutes.

ARTICLE 5: INDEMNIFICATION AND INDIVIDUAL LIABILITY LIMITATION

To the maximum extent permitted by applicable laws within the Republic of Korea and the European Union, Aura Finance and its underlying developers shall not be liable for any indirect, incidental, consequential, special, or exemplary damages. This includes, but is not limited to, data synchronization delays, API bridge dropouts from Tink AB infrastructure, server downtime, or analytical inaccuracies caused by un-synchronized bank ledger data formats.