Cookies & Analytics Notice

OctoWealth may use cookies and similar technologies to operate our website, maintain security, remember preferences, support account functionality, measure basic usage, diagnose errors, monitor performance, and improve reliability.

OctoWealth may use mobile analytics, crash reporting, diagnostic logging, and operational telemetry to maintain and improve the OctoWealth app.

At launch:

• OctoWealth does not use third-party advertising SDKs;
• OctoWealth does not sell personal information;
• OctoWealth does not sell financial data;
• OctoWealth does not use financial data for advertising;
• OctoWealth does not share financial data with advertising networks;
• OctoWealth does not use Plaid-connected financial data for third-party behavioral advertising;
• OctoWealth does not send personal financial data to third-party large language model providers;
• OctoWealth does not use cross-app behavioral advertising tracking at launch;
• OctoWealth does not intentionally collect or use IDFA for advertising at launch.

If OctoWealth later introduces advertising, attribution SDKs, retargeting, affiliate tracking, data broker sharing, or cross-app tracking, we will update this Notice and provide any required consent or opt-out choices.

This Notice covers technologies such as:

• browser cookies;
• local storage;
• session storage;
• pixels;
• tags;
• scripts;
• SDKs;
• mobile device identifiers;
• app instance identifiers;
• push notification tokens;
• crash reporting identifiers;
• diagnostic logs;
• server logs;
• analytics events;
• performance monitoring tools;
• error monitoring tools;
• consent management tools;
• security monitoring tools;
• similar technologies.

These technologies may be used on our website, in our mobile app, or in backend systems.

Cookies are small text files placed on your browser or device when you visit a website. Cookies can help websites work properly, remember preferences, maintain sessions, understand usage, and improve security.

Cookies may be:

• session cookies, which expire when you close your browser;
• persistent cookies, which remain for a set period unless deleted;
• first-party cookies, which are placed by OctoWealth;
• third-party cookies, which are placed by third-party services used on the website.

The OctoWealth mobile app may use similar technologies, such as local storage, secure storage, device identifiers, push tokens, SDK identifiers, and app telemetry.

OctoWealth may use the following categories of cookies and similar technologies.

A. Strictly Necessary Technologies

These are required for the website, app, account, security, or service to function.

Examples include technologies used to:

• load pages;
• maintain sessions;
• authenticate users;
• secure accounts;
• prevent fraud or abuse;
• remember legal consent choices;
• maintain app state;
• process account deletion requests;
• support subscription access;
• support security monitoring;
• prevent unauthorized access.

You may not be able to disable strictly necessary technologies without affecting website or app functionality.

B. Preference Technologies

These help remember choices and settings.

Examples include technologies used to remember:

• theme preference;
• language preference;
• region settings;
• cookie or consent preferences;
• notification preferences;
• app display settings;
• security preferences.

C. Analytics and Performance Technologies

These help us understand how the website and app perform.

Examples include technologies used to measure:

• page views;
• app screen views;
• feature usage;
• load times;
• app startup time;
• API latency;
• error rates;
• crash frequency;
• sync success or failure;
• performance issues;
• device and operating system compatibility.

Where required, optional analytics may be subject to consent controls.

D. Diagnostic and Crash Reporting Technologies

These help us detect, diagnose, and fix technical issues.

Examples include technologies used to collect:

• crash reports;
• stack traces;
• error logs;
• device model;
• operating system version;
• app version;
• performance traces;
• failed API request metadata;
• diagnostic events;
• app reliability metrics.

OctoWealth may use Sentry for crash reporting and performance diagnostics where enabled. OctoWealth may also use AWS CloudWatch for logs, alarms, dashboards, and operational monitoring.

E. Security and Fraud Prevention Technologies

These help us protect users, accounts, infrastructure, and service integrity.

Examples include technologies used to:

• detect suspicious activity;
• monitor authentication events;
• prevent unauthorized access;
• identify abuse or misuse;
• support rate limiting;
• detect security incidents;
• maintain audit logs;
• protect APIs;
• support WAF rules;
• investigate fraud or account compromise.

F. Marketing Technologies

OctoWealth may use limited marketing technologies for its public website, such as measuring visits to public pages or understanding campaign performance.

At launch, OctoWealth does not use financial data for marketing or advertising.

If marketing technologies are used, they should not receive Plaid access tokens, raw transaction data, balances, account credentials, or sensitive financial account data.

G. Advertising and Tracking Technologies

At launch, OctoWealth does not use third-party advertising SDKs or cross-app behavioral advertising tracking.

If OctoWealth later introduces advertising, retargeting, attribution tracking, affiliate tracking, advertising IDs, or behavioral advertising, we will update this Notice and provide required choices.

The OctoWealth website may use cookies, local storage, analytics, logs, or similar technologies to:

• operate the website;
• load legal pages;
• remember consent choices;
• measure page performance;
• understand public website traffic;
• diagnose errors;
• protect against abuse;
• support forms;
• support subscription or checkout links where applicable;
• route users to support or account deletion resources.

Website technologies may collect:

• IP address;
• browser type;
• device type;
• operating system;
• referring page;
• pages viewed;
• timestamps;
• approximate location derived from IP address;
• cookie or consent preferences;
• form submission metadata;
• error logs;
• performance metrics.

Do not submit banking passwords, full account numbers, Social Security numbers, full card numbers, or unnecessary sensitive financial information through website forms.

The OctoWealth mobile app may use app storage, SDKs, diagnostic tools, and backend logs to:

• keep you signed in;
• maintain app settings;
• secure your account;
• support MFA and authentication;
• store local preferences;
• support biometric unlock or PIN settings;
• support push notifications;
• support app performance monitoring;
• diagnose crashes;
• debug errors;
• process Plaid connection events;
• process subscription entitlement status;
• process account deletion;
• support support-ticket workflows;
• improve app reliability.

Mobile app technologies may collect:

• app version;
• device model;
• operating system version;
• installation or session identifiers;
• push notification tokens;
• crash reports;
• error logs;
• performance metrics;
• API request metadata;
• authentication events;
• security events;
• consent events;
• subscription status events;
• account deletion events;
• Plaid link success or failure metadata;
• sync success or failure metadata.

OctoWealth aims to avoid intentionally collecting Plaid access tokens, online banking credentials, full financial account numbers, or unnecessary sensitive financial data in logs, analytics events, crash reports, or diagnostic tools.

OctoWealth may use analytics to understand whether the app and website work properly and to improve reliability and product design.

Analytics may include:

• feature usage;
• onboarding completion;
• consent flow completion;
• account connection success or failure;
• app screen interactions;
• app performance;
• subscription screen interactions;
• support flow usage;
• account deletion flow usage;
• aggregate usage metrics.

Analytics should not include raw Plaid access tokens, online banking passwords, full transaction payloads, full account numbers, or unnecessary sensitive financial information.

Where required, analytics may be disabled or limited unless you provide consent.

OctoWealth may use crash reporting and diagnostic tools, including Sentry where enabled, to detect and fix technical problems.

Crash and diagnostic data may include:

• crash logs;
• stack traces;
• error messages;
• app state at the time of error;
• device model;
• operating system version;
• app version;
• session identifiers;
• performance traces;
• API error metadata;
• network error metadata.

Crash and diagnostic tools are used for reliability, debugging, performance monitoring, security, and support.

OctoWealth aims to configure crash reporting and diagnostics to avoid capturing sensitive financial content, Plaid access tokens, online banking credentials, full account numbers, or other unnecessary sensitive data.

However, users should avoid entering unnecessary sensitive information into free-text fields, support messages, screenshots, or attachments.

OctoWealth uses operational logging to run and secure the service.

Operational logs may include:

• API Gateway logs;
• Lambda logs;
• CloudWatch logs;
• WAF logs;
• CloudTrail audit logs;
• queue processing logs;
• sync status logs;
• security event logs;
• authentication event logs;
• deletion job logs;
• support workflow logs.

Logs help OctoWealth:

• troubleshoot errors;
• monitor service availability;
• detect suspicious activity;
• investigate security issues;
• support deletion requests;
• enforce Terms of Service;
• comply with legal or platform requirements;
• maintain service reliability.

Operational logs are retained according to OctoWealth’s Data Retention and Deletion Policy.

For example, CloudWatch logs are generally retained for approximately 14 days unless a different retention setting applies.

At launch, OctoWealth does not use third-party advertising SDKs or cross-app advertising tracking.

At launch, OctoWealth does not use:

• Meta/Facebook advertising SDK;
• TikTok advertising SDK;
• Google Ads SDK for behavioral advertising;
• third-party retargeting pixels tied to financial data;
• data broker tracking;
• IDFA-based advertising;
• cross-app behavioral advertising;
• third-party advertising networks inside the app.

If OctoWealth later uses attribution or advertising tools, those tools may collect or process data such as device identifiers, app events, campaign metadata, install source, referral source, or conversion events. OctoWealth will update this Notice and provide any required consent or opt-out choices before using such technologies where required.

At launch, OctoWealth does not intentionally collect or use advertising identifiers such as Apple IDFA for advertising.

OctoWealth may collect non-advertising identifiers for app functionality, security, diagnostics, subscriptions, and push notifications, such as:

• app instance identifiers;
• session identifiers;
• Cognito user IDs;
• internal user IDs;
• Plaid item or account identifiers;
• Sentry event or session identifiers;
• device push notification tokens;
• subscription or entitlement identifiers.

These identifiers are used for app functionality, account management, diagnostics, security, fraud prevention, support, subscriptions, and operational purposes, not third-party behavioral advertising.

If you enable push notifications, OctoWealth may collect and store a push notification token associated with your device.

Push notification tokens may be used to send:

• security alerts;
• account notices;
• budget alerts;
• bill reminders;
• subscription reminders;
• app feature notifications;
• service notices;
• other app-related notifications.

You can control push notification permissions through your device settings and, where available, through in-app notification settings.

OctoWealth may provide consent controls for optional analytics, marketing, cookies, or similar technologies.

Depending on implementation, you may be able to manage preferences for:

• analytics;
• marketing communications;
• push notifications;
• cookies;
• crash reporting where optional;
• personalized app insights;
• other optional features.

Some technologies are necessary for security, account operation, legal compliance, fraud prevention, service delivery, and app functionality. These may not be disabled without limiting or preventing use of OctoWealth.

If you disable optional analytics or cookies, certain features may still collect necessary operational, security, authentication, or diagnostic data.

You may manage cookies and similar technologies in several ways.

A. Browser Settings

Most browsers allow you to block or delete cookies. If you block cookies, some website features may not work correctly.

B. Device Settings

Your device may allow you to manage:

• app permissions;
• push notifications;
• background app refresh;
• advertising identifier settings;
• analytics sharing settings;
• biometric settings;
• camera or photo permissions.

C. In-App Settings

Where available, OctoWealth may provide in-app settings for:

• marketing consent;
• analytics consent;
• push notifications;
• security preferences;
• privacy preferences;
• data export;
• account deletion.

D. Cookie Banner or Consent Tool

If OctoWealth uses a cookie banner or consent management tool on the website, you may be able to manage optional cookies through that tool.

E. Support

You may contact OctoWealth at:

support@octowealthapp.com

Some browsers and devices offer “Do Not Track” or global privacy control signals.

At launch, OctoWealth does not sell personal information and does not use financial data for targeted advertising.

Because there is not a single uniform industry standard for “Do Not Track” signals, OctoWealth may not respond to all such signals unless required by applicable law.

Where legally required and technically feasible, OctoWealth will honor applicable opt-out preference signals.

OctoWealth does not use Plaid-connected financial data for third-party advertising.

OctoWealth does not sell financial data.

OctoWealth does not share financial data with advertising networks.

OctoWealth does not send personal financial data to third-party large language model providers at launch.

OctoWealth may use financial data to provide app functionality, such as:

• dashboards;
• budgets;
• transaction categorization;
• bills and subscription detection;
• cash-flow views;
• net worth calculations;
• debt strategies;
• investment tracking;
• reports;
• exports;
• financial insights.

OctoWealth may use limited operational metadata to understand whether these features are working properly. For example, OctoWealth may log that a sync succeeded or failed, but should not intentionally log Plaid access tokens or unnecessary sensitive financial content.

OctoWealth may use third-party services that support cookies, analytics, logging, diagnostics, subscriptions, infrastructure, or similar functions.

These may include:

• Amazon Web Services;
• Amazon Cognito;
• AWS CloudWatch;
• AWS CloudTrail;
• AWS WAF;
• Plaid;
• Sentry;
• Apple;
• Google;
• Firebase Cloud Messaging;
• Stripe, if used;
• Atlassian Jira Service Management;
• Financial Modeling Prep;
• CoinGecko;
• exchange rate providers;
• other service providers.

These third parties may process data under their own terms, privacy policies, and service agreements.

OctoWealth is not responsible for third-party websites, platforms, or services that are not controlled by OctoWealth.

The following table describes categories of cookies and similar technologies that may be used on the OctoWealth website.

The following table describes categories of technologies that may be used in the OctoWealth mobile app.

Cookies, analytics records, logs, crash reports, and similar data are retained according to their purpose and applicable retention settings.

Examples:

• session cookies may expire when the browser session ends;
• persistent cookies may remain until they expire or are deleted;
• consent preferences may be retained to remember your choices;
• CloudWatch logs are generally retained for approximately 14 days unless a different retention setting applies;
• SQS dead-letter queue messages may be retained for approximately 14 days;
• DynamoDB point-in-time recovery may retain recoverable copies for up to approximately 35 days;
• AWS Backup snapshots may persist for approximately 90 days;
• S3 access logs may be retained for approximately 90 days where configured;
• support and billing records may be retained longer where necessary.

For more information, see:

Data Retention and Deletion Policy: https://octowealthapp.com/data-retention

OctoWealth is intended only for users who are at least 18 years old.

OctoWealth does not knowingly use cookies, analytics, or tracking technologies to collect information from users under 18.

If we learn that a person under 18 has created an account or provided information to OctoWealth, we may delete the account and associated information, subject to legal and operational retention needs.

OctoWealth may update this Cookie, Tracking, and Analytics Notice from time to time.

If we make material changes, we may provide notice by email, in-app notice, website notice, cookie banner update, app update notice, posting an updated Notice, or another reasonable method.

The updated Notice will become effective when posted or as otherwise stated in the notice.

If required by law or platform rules, we may request renewed consent before using certain cookies, analytics, tracking, or similar technologies.

If you have questions about this Cookie, Tracking, and Analytics Notice or your choices, contact:

OctoPath LLC d/b/a OctoWealth Email: support@octowealthapp.com Website: https://octowealthapp.com

The following short version may be used in a website cookie banner:

OctoWealth uses necessary cookies and similar technologies to operate and secure our website and app. We may also use optional analytics and diagnostic tools to understand performance, fix errors, and improve reliability. We do not sell personal information, do not use financial data for advertising, and do not use third-party advertising SDKs at launch. You can manage optional cookie and analytics choices where available.

Buttons:

Accept Optional Cookies Reject Optional Cookies Manage Preferences

The following short version may be used in the mobile app:

Help improve OctoWealth by allowing limited analytics and diagnostics. We may collect app interactions, performance data, crash reports, and diagnostic events to improve reliability and fix issues. We do not use your financial data for advertising, do not sell your data, and do not send personal financial data to third-party LLM providers at launch. You can change optional analytics preferences in settings where available.

Buttons:

Allow Analytics Not Now

Optional analytics and diagnostics help OctoWealth improve reliability and fix issues. We do not use financial data for advertising or sell your data.