Privacy Policy

At Xora, your privacy is fundamental to how we build and operate. This policy explains what data we collect, why, and how we protect it.

1. Information We Collect

When you create an account and use Xora, we may collect the following:

• Account information — name, email address, and authentication credentials (managed via Clerk)
• Financial information — linked bank account details (via Plaid), transaction history, XRP deposit and withdrawal records
• Blockchain data — XRP Ledger wallet addresses, destination tags, and on-chain transaction hashes
• Device and usage data — browser type, IP address, pages visited, and interaction patterns

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Xora platform
• Process XRP deposits, yield calculations, and withdrawals
• Facilitate bank account linking and ACH transfers
• Prevent fraud, unauthorized access, and prohibited activities
• Communicate important updates about your account or our services
• Comply with legal and regulatory obligations

3. Data Storage and Retention

Your data is stored using industry-standard encrypted databases. We retain your personal information for as long as your account is active or as needed to provide you services. Financial records may be retained longer to comply with regulatory requirements.

We do not store your bank account login credentials. All banking connections are handled securely through Plaid's tokenized infrastructure.

4. Third-Party Services

Xora integrates with the following third-party services, each with their own privacy practices:

• Clerk — authentication and identity management
• XRP Ledger (XRPL) — blockchain transactions are publicly visible on the decentralized ledger
• Plaid — secure bank account verification and linking
• Dwolla — ACH payment processing for fiat transfers

We share only the minimum data necessary for these services to function. We do not sell your personal information to any third party.

5. Cookies and Tracking

Xora uses essential cookies to maintain your session and authentication state. We may use analytics tools to understand aggregate usage patterns. We do not use advertising trackers or sell data to ad networks.

6. Security

We implement multiple layers of security to protect your data, including:

• TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Secure authentication via Clerk with multi-factor support
• Regular security audits and monitoring
• Principle of least privilege for internal access controls

While we take security seriously, no system is completely immune to risk. We encourage you to use strong passwords and enable all available security features on your account.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for optional data processing
• Export your data in a portable format

To exercise any of these rights, contact us at privacy@xora.finance.

8. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the platform or via email. Continued use of Xora after changes constitutes acceptance of the updated policy.

9. Contact

For questions or concerns about this privacy policy or your data, reach us at:

privacy@xora.finance