The deets on the data
To help you find, monitor, and manage all of your online accounts, we need permission to process certain data. These permissions are optional, and you can revoke access at any time.
Here’s what we ask you to trust us with – and why.
Overview of what we collect
Your first and last name
Your email address
The name on the bank account(s) you ask us to search
Information about any financial transactions that may indicate the existence of any account(s)*
Device/IP data | Web analytics such as the interaction between Yorba and your device/browser
Geolocation data
The names and domain names of email senders that may represent accounts
The frequency with which they are sent and opened
Unsubscribe links
*Yorba does not access your actual credit card or bank account numbers; we only store the name of the banking institutions you ask us to search, the name of the bank accounts you ask us to search, and what you’re being charged in order to display it for you.
To find accounts that send you email
Read-only inbox access
Yorba scans connected inboxes for two things: metadata and/or text indicative of an email sent via automated mailing list (as opposed to by an actual person), and language patterns typical of email sent in regard to an online account.
Other than the names of companies who send you emails, plus headlines and statistics re: how many email sends and how often you actually open them, nothing in/about your emails will be stored/analyzed.
To find accounts that you pay for
Payment history
By scanning for recurring payments, we can identify subscription fees and paid services. To carry out this search, we use Plaid: the same secure, encrypted authentication service used by popular financial tools like Venmo.
Yorba does not access your actual credit card and bank account numbers – we only store the name(s) of the banking institution(s) you ask us to search, the name(s) of the bank account(s), and what you’re being charged.
To find accounts publicly linked to you
Your email address(es)
With less info than you’d give out to buy socks online, Yorba can scan the public and dark web for any association between your email address(es) and online accounts.
How we store your data
TL;DR: We encrypt and store customer data on Google Cloud with the same encryption keys that government agencies use to protect their data
Detailed version:
Each chunk of data is encrypted at the storage level with an individual encryption key: no two chunks will use the same encryption key, even if they are part of the same Cloud Storage object.
All data stored in Google Cloud is encrypted at the storage level using AES256, the same encryption key used by NASA. If they’re hiding all the government’s secrets, it’s good enough for ours.
Have other questions?
Check out our Privacy Policy or email us directly at yo@yorba.co.