Privacy Policy

1. Who We Are

FiniQ is a personal finance web application available at getfiniq.app. It is operated as a micro-SaaS product by an independent developer. For data protection queries, contact us at: support@getfiniq.com

2. What Data We Collect

We collect only the data needed to provide the service:

• Account data: Your email address and encrypted password when you register.
• Financial data you enter: Expenses, income figures, salary deductions, and currency preferences — stored in your account only.
• Payment data: If you subscribe to Premium, your payment is processed by Stripe. We do not store your card number — Stripe handles this securely. We only store whether your account has an active Premium subscription.
• Usage data: Basic usage logs (e.g., login timestamps) to maintain security and diagnose issues.

We do not collect your name, phone number, address, or any identity document.

3. Why We Use Your Data (Legal Basis)

• Contract performance: To provide the FiniQ service you signed up for.
• Legitimate interests: To maintain security, fix bugs, and improve the product.
• Legal obligation: To comply with applicable tax and financial regulations as required.

We do not use your data for advertising, profiling, or sale to third parties.

4. Who We Share Data With

We use a small number of trusted third-party services:

• Supabase (supabase.com) — database and authentication. Data stored on EU servers.
• Vercel (vercel.com) — website hosting and serverless functions.
• Stripe (stripe.com) — payment processing. Stripe is PCI-DSS compliant.

We do not sell, rent, or share your personal data with any other third party.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (e.g., transaction records for tax purposes — retained for 7 years under Irish law).

6. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access: Request a copy of the data we hold about you.
• Right to rectification: Ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten"): Ask us to delete your account and data.
• Right to restriction: Ask us to limit how we process your data.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, email us at support@getfiniq.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.

7. Cookies

FiniQ uses only essential cookies required for login sessions and authentication. We do not use advertising cookies, tracking cookies, or any analytics cookies. No cookie consent banner is required for essential-only cookies under EU law.

8. Data Security

All data is transmitted over HTTPS (TLS encryption). Passwords are hashed using bcrypt and never stored in plain text. Your financial data is stored in a private database with Row Level Security — only you can access your own data.

9. International Transfers

Our service providers (Supabase, Vercel, Stripe) may process data outside the EU/EEA. Where this occurs, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions approved by the European Commission.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email.

11. Contact

For any privacy questions or to exercise your rights, contact us at:
📧 support@getfiniq.com
🌐 getfiniq.app