Privacy & Security

We understand that by using Bedrock Money, you are trusting us with your data. That's why we treat your personal and financial data like we'd want ours to be treated. This policy explains how Vikorus LLC collects, uses, and protects your information when you use our financial planning application.

Information We Collect

We collect personal information including your name, email address, and contact details during account registration. Through our secure integration with Plaid and other financial service providers, we access your bank account balances, transaction history, credit card statements, investment account details, and loan information. We also collect device information, usage analytics, and any feedback you provide to improve our services.

How We Use Your Information

We use your information to provide and maintain our financial planning services, analyze your financial data to provide personalized insights, detect and categorize recurring payments and subscriptions, generate financial reports and AI-powered recommendations, and communicate with you about your account. We also use aggregated and anonymized data for internal analytics and business purposes to improve our AI algorithms and service functionality.

Data Access and Control

You have complete access to and control over your data. You can download all your transactional data, including categories and notes, from your Bedrock Money app settings. Your personal financial account data is only accessed by our team when necessary to provide services, such as when you request support for a data issue. You can delete your account at any time through your settings or by contacting us at privacy@bedrockmoney.com.

Data Security

We employ multiple security measures to keep your data safe, including 256-bit SSL encryption for all data transmission, encryption at rest for stored data, SOC 2 Type II certified data centers, regular security audits and penetration testing, multi-factor authentication on all internal systems, and read-only access to financial accounts. We do not see or store your bank login credentials because we partner with trusted data aggregators like Plaid to connect to your financial institutions using secure OAuth protocols.

Third-Party Services

We work with trusted third-party service providers including Plaid for secure bank account connections and transaction data, cloud infrastructure providers for hosting with enterprise-grade security, and analytics providers for app performance monitoring using anonymized data only. These providers adhere to industry security standards and are bound by strict confidentiality agreements. We do not sell your personal data to third parties for advertising purposes.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only when required by law or to comply with legal processes, to protect our rights, privacy, safety, or property, in connection with a business transfer or acquisition with prior notice, or with service providers who assist in operating our platform under strict confidentiality agreements.

Data Retention and Deletion

We retain your information for as long as necessary to provide our services and comply with legal obligations. If you delete your account, we do not keep any of your linked financial data or account data (email address, budgets, etc.), except in limited circumstances where required by law, to resolve disputes, or protect our users. Where we have no such obligations, data will be completely removed from all our internal systems, including backups, within 60 days.

Infrastructure and Compliance

Bedrock Money's infrastructure is built on enterprise-grade cloud platforms used by leading financial companies worldwide. Our infrastructure adheres to industry standard security, privacy and compliance controls including ISO/IEC 27001, SOC 1/2/3, and PCI DSS standards. We use multi-factor authentication on all internal systems and regularly conduct application penetration tests to identify and mitigate vulnerabilities.

Your Rights

You have the right to access and review your personal information, request correction of inaccurate information, request deletion of your account and data, opt-out of certain communications, and export your data in a portable format. You can exercise these rights through your account settings or by contacting us directly.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our services. You can control cookie preferences through your browser settings, though some functionality may be limited if you disable certain cookies.

Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it immediately.

Transparency and Updates

We believe in transparency above all else. While our Privacy Policy comprehensively details our data practices, we understand that legal documents aren't everyone's favorite thing to read. We'll keep this page up-to-date and notify you of any significant changes to our privacy practices. We may update this policy from time to time by posting the new policy on this page and updating the effective date.