Effective June 25, 2026
Privacy Policy
Oris is a private beta personal finance application. This policy explains what data Oris processes when you use the service, including when you connect bank accounts through Enable Banking.
Controller and Contact
For data protection matters, contact the Oris application owner at kassai.kaym@gmail.com.
The public web application is available at https://oris-webapp.kaymkassai.com. The backend API is available at https://oris-api.kaymkassai.com.
Data We Process
- Account profile data such as email address, timezone, base currency, authentication sessions, and security logs.
- Banking data retrieved with your consent, including account information, balances, transactions, bank connection status, and consent metadata.
- Financial organization data you create in Oris, such as transaction notes, exclusions, and categories.
- Technical data needed to operate and secure the service, including request metadata, audit records, error traces, and rate-limit signals.
Why We Process Data
- To authenticate you and protect access to your account.
- To connect to supported banks after explicit consent and synchronize account information.
- To calculate balances, spending summaries, and category analytics.
- To monitor reliability, prevent abuse, debug errors, and maintain auditability.
Bank Connections
Oris uses Enable Banking as an account information service provider. You are redirected to your bank or Enable Banking to authorize access. Oris stores connection records and encrypted identifiers needed to retrieve and refresh account data. You can disconnect a bank connection from the application.
Legal Basis
Banking data is processed based on your explicit consent and your request to use Oris financial features. Security, audit, and operational records may be processed for legitimate interests in protecting and operating the service.
Sharing
Oris does not sell personal data. Data may be processed by infrastructure, email, database, logging, or open banking providers only as needed to operate the service. Bank access is handled through Enable Banking and the relevant bank authorization flow.
Retention
Oris keeps data while your account or testing access is active, unless a shorter period is required for security or consent workflows. You may request access, export, or deletion by contacting the application owner.
Security
Oris uses access tokens, refresh-token rotation, OTP verification, encrypted storage for sensitive banking identifiers, and operational logs for security-relevant events.
Your Rights
Depending on applicable law, you may request access, correction, export, deletion, restriction, or objection to processing of your personal data. Contact kassai.kaym@gmail.com for data protection requests.