Privacy Policy

Data controller

The party responsible for processing your personal data is:

• Legal name: TRIERIA BRASIL LTDA
• CNPJ: 68.450.023/0001-31
• Registered address: Alameda Rio Negro, 503, Sala 2020, Alphaville Centro Industrial e Empresarial, Barueri/SP, CEP 06454-000, Brasil
• Data protection officer (DPO) contact: contato@budgy.online

What data we collect and why

We only collect the data needed to provide the service. We group it as follows:

Account and identity data. Name, email, password (always stored hashed, never in plain text), country, time zone, language, primary currency, profile photo, tax document (CPF, CUIL/CUIT or RIF depending on the country), WhatsApp number, and, if you sign in with Google, your Google account identifier. Purpose: to create and manage your account, authenticate you, and provide support.

Demographic profile (optional). If you choose to fill it in: year of birth, gender, state/province, employment status, income range, how many people live in your household, whether you have dependents, housing situation, main financial goal, level of financial knowledge, and main financial challenge. Purpose: to personalize recommendations and budgets. It is optional and you may leave it blank.

Financial data. Transactions, accounts, credit cards with their statements and installments, budgets, goals, debts, investments, and consórcio quotas (administrator, group, quota number, amounts paid, and bids). If you upload a statement or bill PDF to import it, we read its text to extract the transactions and keep the ones you confirm; the file itself is not stored. Purpose: to provide the core financial-organization feature.

Integration credentials (optional). If you connect your IOL or Binance portfolio, we store your IOL username and password or your Binance API key, encrypted. Purpose: to read your portfolio and show you your investments.

What comes in through the AI connector and the public API. If you connect an AI assistant to your account (the MCP connector) or use the public API with a token, we receive what those tools send on your behalf, such as queries or the transactions, budgets and goals they create, and we handle it like anything you enter in the app. Whatever an external assistant reads from your account is also subject to that provider’s policy, with whom you have the relationship. Purpose: so you can use Budgy from those tools.

Feedback. If you send us a comment with a screenshot, we keep the text and the screenshot, which may show data from your account. Purpose: to understand and fix what you tell us.

Technical and session data. IP address, browser and operating system (user agent), how you signed in (for example, with Google), and the dates of login, last activity, and logout. Purpose: security, fraud prevention, and operation of the service.

Communications. We use your email to write to you about your account and the service. Every email about the service includes a link to unsubscribe; security notices about your account (for example, an email change or a support access) always reach you. Purpose: to tell you what matters about your account and the service.

Support access. To solve something you report, a team member may enter your account in read-only mode and for a limited time (one hour at most). We notify you by email every time, and we record who entered, when, and why. Purpose: to provide support.

Legal basis for processing

We process your data on the following legal bases (LGPD arts. 7 and 11): performance of the service contract, for the features you request; your consent, for optional data such as the demographic profile; compliance with legal and regulatory obligations; and our legitimate interest in security, fraud prevention, improving the service, and communications about the service, always respecting your rights and freedoms.

Who we share your data with and international transfer

To provide the service, we share data with providers acting as processors, only for the stated purposes:

If you allow it, on a dedicated screen before importing, the text of your PDFs is sent to Anthropic, a company based in the United States, so that the Claude model can extract the transactions. Without permission, you can add the transactions by hand. Anthropic uses that text only to provide the service to Budgy, does not use it to train models and deletes it within 30 days, unless it is flagged for violating Anthropic’s usage policies (in that case it may keep it for up to 2 years) or the law requires it to keep it. It stores the text in the United States, and the reading may run on its servers in other countries. Budgy does not keep the file or the text of the PDF: the transactions read stay encrypted until you confirm the import, for 30 minutes at most, and afterwards we keep only the ones you confirmed. WhatsApp messages do not go through Claude: we interpret them with our own rules.

To show you the price of your investments, we query market-data providers, which receive only the asset symbol (for example, “AAPL”), never your data.

International transfer. Budgy’s servers and database are on Railway, in the United States, and files are on Tigris. Most of the providers in the table also process data outside Brazil. This means your personal data is transferred and stored outside the country. We carry out these transfers under the LGPD: sending your PDFs’ text to Anthropic, based on your specific and prominent consent (art. 33, VIII); the others, based on art. 33, IX, because they are necessary to perform the contract you enter into with us when you create your account (art. 7, V).

How we protect your data

Budgy’s website, app and API use only encrypted connections (HTTPS). Your password and access tokens are stored only as hashes, and your IOL and Binance credentials, encrypted. Support enters your account in read-only mode, with an email notice and a record of each access.

Retention period

We keep your personal data while your account is active and for as long as necessary to fulfill the described purposes and applicable legal obligations.

When you delete your account, we immediately delete what is listed at budgy.online/en/delete-account. Only these remain:

• what you shared with people still on Budgy, while they keep their account (in expense groups, with the name and email you were added with, and in businesses you shared, with the business name and tax ID);
• an internal number in place of your account, with no name, email or ID document, with no time limit;
• payment records, for the period tax law requires;
• access records from the app, the AI connector and the public API, for 6 months (Brazil’s Marco Civil da Internet);
• records of support access, with no time limit for now;
• backups, for up to 30 days;
• technical logs, which we can see for up to 31 days (Railway and Cloudflare may keep them longer);
• the record of when you allowed or revoked AI reading and of the permission text you saw, for 5 years after the deletion, linked to that number;
• what stays linked to that number without your name, email or ID document (account settings, revoked credentials and connections, plan changes, features enabled by our team, usage metrics without text and, if something shared involves one of your accounts or businesses, that account or business, with no name or balance), for now with no time limit.

Your rights and how to exercise them

As the data subject, the LGPD (art. 18) grants you the following rights: confirmation that processing exists; access to your data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary data or data processed in breach of the law; portability; information about the parties with whom we share your data; and withdrawal of consent.

To exercise any of these rights, including the deletion of your account and your data, write to contato@budgy.online from your account’s email address. You can also delete your account in the app itself: the steps, what we delete and what we keep are at budgy.online/en/delete-account.

There is one exception and we would rather say it plainly: if you shared accounts, cards, investments, goals or budgets with someone in your household who is still on Budgy, those are not deleted, and neither are the transactions you recorded on shared accounts and cards, whether yours or another household member’s. Deleting them would erase the other person’s history, and that person did not ask for anything.

These are kept without your name, email or ID document, and also without the branch, last digits and notes of each account (such as a Pix key or a CBU), the cards’ last digits, the investment notes, the goal descriptions and the notes on budgets and reconciliations. Each one keeps the name you gave it, and so do the categories you created. The transactions keep their description and notes, which may include names, Pix keys or CBUs, yours or other people’s. If you want all of it deleted, write to us and we will sort it out with whoever shares the household. If the household owner removes you, what you shared only with that household is transferred to them, with all its transactions, and stays shared with the household. From then on, they decide who to share it with.

You can revoke your permission for AI to read your PDFs at any time, free of charge, in Settings › Security; what you already imported stays in Budgy.

Cookies

This website uses a single functional cookie, "budgy_lang", to remember the language you choose. Neither the website nor the app uses cookies or SDKs for analytics, advertising, or third-party tracking. The app uses the technical storage needed to keep your session signed in.

Changes to this policy

We may update this Privacy Policy. We will publish the current version on this page, with its last-updated date. If the changes are substantial, we will notify you through the available means.