This Privacy Policy explains how FinBuro Tech ("we", "us", "our") collects, uses, stores and protects your personal data when you use our financial management platform at finburo.com ("Service").
We are committed to protecting your data. We collect only what is necessary to provide the Service, never sell your data to third parties, and comply with the General Data Protection Regulation (GDPR).
FinBuro Tech is operated by an individual entrepreneur registered in Georgia under Tax Code Article 89 (Small Business status, NACE 82990). Our server infrastructure is hosted in the European Union (Hetzner, Germany/Finland).
Contact: privacy@finburo.com
Account data: name, email address, password (stored as PBKDF2 hash — never in plain text), company name, selected plan.
Financial data you enter: transactions, accounts, articles, employees, payroll, budgets and other data you input into the Service. This data belongs to you.
Usage data: login timestamps, IP address (for security), browser type. We do not track behaviour beyond what is necessary for security and service functionality.
Bank API credentials (optional): if you connect a bank account via API, your API keys are stored encrypted using AES-128 (Fernet) encryption with a key held on our servers. See Section 7 for details.
Cookies: session cookie (required for login), preference cookie (optional). See our Cookie Policy for details.
We do not use your data for advertising, profiling or sale to third parties.
Your data is stored in PostgreSQL on servers located in the European Union. We implement the following security measures:
We retain your data for as long as your account is active. After account deletion:
If you choose to connect a bank account via API (Revolut, Stripe, Wise, TBC or other), you are solely responsible for the API keys you provide. We store them encrypted, but you acknowledge that connecting third-party services carries inherent risk. We recommend using read-only API keys where your bank allows it. You can delete your bank connections at any time from Settings.
You have the following rights regarding your personal data:
GET /gdpr/export)DELETE /gdpr/erase)To exercise your rights, contact us at privacy@finburo.com. We will respond within 30 days.
We do not use Google Analytics, Facebook Pixel or any advertising trackers.
Your data is stored and processed within the European Union. We do not transfer personal data outside the EU/EEA without appropriate safeguards.
The Service is not directed at children under 16. We do not knowingly collect data from children.
We may update this policy from time to time. We will notify you by email and update the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.
For privacy-related questions or to exercise your rights:
📧 privacy@finburo.com
📍 FinBuro Tech, Georgia