Privacy Policy

FiscoTrail is based in the Netherlands. For any privacy-related question, you can reach us at info@fiscotrail.com.

Under the EU General Data Protection Regulation (GDPR), we are the "data controller" for the personal data you provide through FiscoTrail.

Account information: your email address and any name you provide when you register.

Financial data you enter yourself: transactions, account balances, categories, budgets, loan details, investment holdings, and any other information you choose to record are collected by the platform and stored on a secured 3rd party operated server. This is the core of what the app is for, and it stays under your control — we don't sell it, and we don't use it to advertise to you.

Basic usage data: we record which pages you visit within the app (e.g. "you opened the Budget page") so we can understand which features are actually used and fix problems. This is stored in our own database, tied to your account — we do not use any third-party analytics or advertising trackers.

Technical data: a session cookie that keeps you logged in. This is strictly functional — it is not used for tracking or advertising.

We never ask for, request, or store your online banking username, password, or any bank login credential. FiscoTrail does not connect directly to your bank. All financial data is entered by you, manually or via file upload, or pulled as general market prices (see below) that are not tied to your identity when we request them.

Performance of a contract — processing your financial data is the entire point of the service you've signed up for; without it, we can't provide the dashboard, budgets, or reports you're using.

Legitimate interest — basic usage data helps us keep the product working correctly and improve it, in a way that has minimal impact on your privacy since it never leaves our own database.

We use a small number of specialist providers ("processors") to run FiscoTrail. Each is contractually limited to using data only to provide their service to us — not for their own purposes.

• Supabase — our database and authentication provider. This is where your account and financial data are stored, hosted in the European Union (France).
• Vercel — hosts the FiscoTrail web application itself, in the European Union (Paris).
• Resend — sends transactional emails (e.g. account confirmation). Only your email address is shared with them, for this purpose only.
• Finnhub, CoinGecko, and Frankfurter/ECB — provide stock, crypto, and currency exchange-rate data. We query these for general market prices (e.g. "what is AAPL trading at today") — we do not send them any of your personal or financial information. They have no way to know who is asking.

We do not sell your data to anyone, and we do not share it with advertisers or data brokers.

Your data is processed and stored entirely within the European Union: Supabase (database and authentication) is hosted in France, and Vercel (application hosting) runs in Paris. No international transfer of your personal data occurs.

We keep your data for as long as your account is active. If you delete your account, you'll have 30 days to change your mind by logging back in and cancelling. After that, your account and all data are permanently deleted, except where we're required to keep limited records for legal or tax purposes.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request a copy of your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these, contact us at info@fiscotrail.com.

Data is encrypted in transit (HTTPS) and at rest. Every user's data is isolated at the database level using Row Level Security, so one account cannot access another's data even in the event of an application-level bug. Access to production systems is limited to the operator of FiscoTrail.

We use one essential cookie to keep you signed in. We do not use cookies for advertising or cross-site tracking, and we do not use any third-party analytics or ad cookies.

FiscoTrail is not directed at, and should not be used by, anyone under the age of 18.

If we make material changes to this policy, we'll notify you by email or an in-app notice before they take effect.

Questions about this policy or your data: info@fiscotrail.com.