Privacy policy
Edition of 2026-10-22
1. Who we are
Test LLC (1 Example Street, Office 1, Testville, 000000; "we") runs Finance Assistant ("the Service") and is the controller of the personal data described here. Contact: privacy@tmless.org.
2. What we process and why
- Account data — your Google account id, email and name: to sign you in and to email your weekly report.
- Financial data you provide — bank statements you upload and the transactions in them (dates, amounts, payees, references): to categorise them, compute totals and answer your questions. Payees may be individuals; we process their names only as part of your transactions and only to show them to you.
- Your questions and the Service's answers.
- Technical data — a session cookie; your IP address only at request time to tell the country (we keep the country code only); delivery and opening of report emails.
- Pseudonymous usage statistics — events and the topic of questions, with no amounts, names or numbers.
Legal bases (GDPR art. 6): performance of the contract (sign-in, the Service itself), your consent (weekly emails, statistics) — you can withdraw it at any time.
3. Processors
Hetzner Online GmbH (Germany) — hosting, data stored encrypted; Anthropic, PBC (USA) — the language model that writes answers and report summaries; ActiveCampaign, LLC / Postmark (USA) — report emails; Google LLC (USA) — sign-in. Transfers to the USA rely on the EU–US Data Privacy Framework or standard contractual clauses.
4. Security and retention
Transactions, statements, messages and your profile are encrypted with a per-user key. Data is kept while you have an account; deleting the account (Accounts & reports → Delete) erases it and destroys the key within 30 days.
5. Your rights
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to your data protection authority. Write to privacy@tmless.org; we reply within one month.