Lorica is a personal debt management and budgeting web application developed by Automate100, LLC ("we," "us," or "Lorica"). Lorica helps users analyze debt, create payoff plans (e.g., Avalanche method with user overrides), accumulate funds for creditor payments, and optionally automate scheduled ACH debits from their checking account to support accelerated debt payoff according to their selected strategy.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service. It covers integrations with third parties including Plaid (for read-only financial account linking), Stripe (for subscription billing), Synctera (for optional embedded banking and Dedicated Accounts via a sponsor bank), and Spinwheel (for user-directed creditor payments).
We do not sell your personal information for targeted advertising or similar purposes. By using Lorica, you agree to this policy.
If applicable under the Gramm-Leach-Bliley Act (GLBA) and Regulation P, we provide a separate GLBA Privacy Notice detailing our practices for nonpublic personal information (NPI), delivered at account opening and annually thereafter. This Privacy Policy supplements but does not replace any such GLBA notice. You may request a paper copy at no charge by contacting privacy@trylorica.com.
We collect only the information necessary to provide our service:
Some information we process — including financial account data and debt details — may constitute sensitive personal information under applicable state privacy laws. We use and disclose such information only to provide the services you have requested and as otherwise permitted by law.
We use your information to:
We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects on you without prior notice and, where required, your consent.
We share information only as necessary and do not sell it for targeted advertising:
We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA, including for cross-context behavioral advertising. You can manage your Plaid connections at any time via the Plaid Portal at my.plaid.com.
We use industry-standard security measures including HTTPS/TLS 1.3 encryption in transit, AES-256 encryption at rest via Xano, strict access controls, and multi-factor authentication across all internal systems. We regularly review and update our safeguards in accordance with our Information Security Policy.
No Lorica personnel have signatory authority, unsupervised view-only access, or control over debits or credits outside your pre-authorized schedule. In the event of a security breach involving your personal information, we will notify you and applicable regulators as required by law — including within 30 days to the FTC where required under the GLBA Safeguards Rule.
We retain personal information only as long as necessary to provide the service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.
You may at any time:
Depending on your location, you may have additional rights under U.S. state privacy laws, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Indiana, and others. These may include rights to:
We honor Global Privacy Control (GPC) and universal opt-out signals where required by law. Submit requests to privacy@trylorica.com. We verify identity as needed and respond within statutory timelines (generally 45 days, extendable where permitted). You may designate an authorized agent to act on your behalf with written proof of authorization or a power of attorney.
Our service is not directed to children under 13 (or 16 in some jurisdictions) and we do not knowingly collect personal information from minors. If you believe we may have inadvertently collected information from a child, please contact privacy@trylorica.com and we will delete such information as promptly as practicable.
We will notify you of material changes via email or in-app notice at least twenty-one (21) days before the effective date and will post the updated policy with a new effective date. Continued use of the service after the effective date constitutes acceptance of the updated policy. If you do not agree to a change, you may close your account before the change takes effect.
For privacy-related questions, requests, or concerns:
| Legal Name | Automate100, LLC d/b/a Lorica |
| Mailing Address | 25248 Pacific Hwy S, Ste 101 - 2022 Kent, WA 98032, United States |
| Privacy Email | privacy@trylorica.com |
| Response Timeframe | 45 days (extendable where permitted by law) |
| GLBA Privacy Notice | Delivered at account opening and annually; paper copy available on request |
If your privacy concerns have not been resolved to your satisfaction, you may contact your state Attorney General or applicable privacy regulator. California residents may contact the California Privacy Protection Agency at cppa.ca.gov. Virginia residents may contact the Virginia Attorney General's Consumer Protection Section.
Version 2.0 | Prepared by Automate100, LLC d/b/a Lorica | Pending counsel review prior to launch.