Security at Ovr Finance
How Ovr protects information in transit, how financial accounts are connected, and what Ovr deliberately never receives.
Last updated
Ovr Finance is a product of JRM Creative Ventures LLC. This page describes, in plain terms, the security-relevant parts of how Ovr works. We have deliberately kept it free of claims we cannot stand behind.
1. Secure Connections
Ovr uses encrypted HTTPS/TLS connections to protect information transmitted between users and Ovr services.
2. Financial Account Connections
Supported financial accounts may be connected using Plaid.
Ovr does not receive or store a user's bank username or password through the Plaid connection. Credentials are entered with Plaid rather than with Ovr.
Plaid publishes its own security documentation at plaid.com/security. Ovr does not speak for Plaid's certifications or practices.
3. Authentication and Account Access
Ovr uses account authentication and server-side authorization controls to help protect access to user accounts and associated information.
4. Subscriptions
Digital subscriptions and eligible in-app purchases are processed through the applicable Apple App Store or Google Play billing systems, with subscription-management infrastructure supporting entitlement status. Ovr does not collect or store your card number for these purchases.
5. User Control
Connecting a financial account does not itself authorize Ovr to move money.
Any future payment functionality would require separate authorization.
6. Ongoing Security Practices
Ovr periodically reviews its security practices and works to identify and remediate vulnerabilities as the platform evolves.
What Ovr has not done
So that this page cannot be read as claiming more than it should, we state the following plainly:
- Ovr has not completed an independent SOC 2 examination, and holds no SOC 2 report.
- Ovr is not ISO 27001 certified or certified under any comparable standard.
- Ovr has not commissioned an independent third-party penetration test, and operates no formal bug-bounty programme.
If any of this changes, this page will be updated. Ovr does not describe its security as "bank-level", "military-grade" or otherwise certified, because those descriptions would not be accurate today.
7. Security Contact
If you believe you have found a security issue affecting Ovr, please contact us so we can look into it.
See also our Privacy Policy and Data Retention Policy.