Privacy Policy
Last updated: May 2026
1. Who we are
Financial Analysis App is operated by Solucions Agency (sole trader, the Netherlands). Contact: luc@solucionsagency.nl
2. Data we collect
- Bank connections: account identifiers and access tokens provided by Plaid after you link your bank account
- Transaction data: transaction history retrieved via Plaid for financial analysis
- Uploaded files: documents you manually upload for analysis
- Account information: email address and user ID managed by Supabase authentication
- Consent records: timestamps and scope of the permissions you grant
3. How we use your data
- To provide personalised financial analysis and coaching insights
- To display your transaction history and spending patterns in the dashboard
- To detect recurring transactions and budget trends
We do not sell, rent, or share your financial data with third parties for marketing purposes.
4. Data storage and security
- All data is stored in Supabase (EU region) and protected by row-level security policies — your data is only accessible to you
- Bank access tokens are encrypted at rest using AES-256-GCM
- All data in transit is protected by TLS 1.2 or higher
- Authentication is handled by Supabase Auth with mandatory two-factor authentication (TOTP)
5. Data retention and deletion
Your data is retained for up to 7 years from your last sign-in. After 7 years of inactivity your account and all associated data are automatically deleted. You may also delete your account at any time via Settings → Delete Account, which permanently removes all your financial data (bank connections, accounts, transactions, budgets, manual accounts, recurring transactions, assets, and category rules), your uploaded files, and your account settings and consent records.
6. Your rights (GDPR)
- Right to access — request a copy of your data via Settings → Export Data
- Right to erasure — delete all data via Settings → Delete Account
- Right to withdraw consent — revoke bank access at any time via the dashboard
- Right to lodge a complaint — contact the Dutch data protection authority (AP) at autoriteitpersoonsgegevens.nl
7. Third-party services
- Plaid — bank connectivity provider. Plaid Privacy Policy
- Supabase Auth — authentication provider. Handles login, mandatory TOTP MFA, and session management
- Supabase — database and storage (EU region)