Privacy policy

1. Data controller

The data controller for your personal data is Dizabyte, owner of the netclariqservice, Spain. We decide the purposes and means of the processing described in this policy. You can write to us at info@dizabyte.es or use the contact form for any question relating to the protection of your data.

Paddle.com Market Ltd acts as an independent controller with respect to the payment and billing data it processes as the authorized reseller (Merchant of Record) of our subscriptions.

2. What data we process

• Account data: name, email address, and access credentials.
• Financial data you enter: accounts, balances, transactions, categories, budgets, loans, assets, investment portfolios, and associated notes.
• Shared space data: invited members, roles, and invitations.
• Subscription and payment data: contracted plan, status, renewal dates, and gateway identifiers. We do not store card numbers.
• Conversations with the assistant: messages you send and the responses generated.
• Contact and support data: whatever you provide through the contact form.
• Technical data: access and error logs, IP address, and browser data, necessary for security and diagnostics.

3. Purposes and legal basis

• Providing the service and managing your account and your spaces — performance of a contract.
• Managing subscriptions, charges, and billing — performance of a contract and legal obligation.
• Handling inquiries, suggestions, and incidents — performance of a contract and legitimate interest.
• Maintaining security, preventing fraud, and diagnosing errors — legitimate interest.
• Sending communications about relevant service changes — legitimate interest; marketing communications only with your consent.

4. Who we share your data with

We only rely on providers that act as processors or joint controllers under data processing agreements:

• Paddle.com Market Ltd — authorized reseller (Merchant of Record): processes payments, taxes, and billing for subscriptions.
• Supabase — hosting of the database and authentication system.
• Lovable — hosting and deployment of the application.
• Google (Gemini) — language model that generates the assistant's responses. When you use it, only the financial context needed to answer your question is sent; that content is not used to train models.
• Professional advisors (legal and accounting) and competent authorities, when there is a legal obligation or it is necessary to defend our rights.
• Yahoo Finance — market quotes (no personal data is sent to it).

We do not sell your data or transfer it to third parties for advertising purposes. We may disclose it to authorities when there is a legal obligation to do so.

5. International transfers

Some providers may process data outside the European Economic Area. In that case, the transfer is based on adequacy decisions or standard contractual clauses of the European Commission, with additional safeguards where applicable.

6. Retention

• Account data and financial data you enter: for as long as the account is active. When you delete it, the data is removed immediately and, at most, within 30 days in backups.
• Conversations with the assistant: until you delete them or delete the account.
• Contact and support messages: up to 24 months from the last communication.
• Technical and security logs: up to 12 months.
• Tax and billing documentation: for the periods required by Spanish commercial and tax law (generally between 4 and 6 years).

After these periods, data is deleted or anonymized, except for what is necessary to defend against claims.

7. Security

We apply encryption in transit, row-level access control in the database so each user only sees data from their own spaces, and good practices for credential management and access logging.

8. Your rights

As the data subject you can exercise the rights of access, rectification, erasure, restriction of processing, portability, and objection, as well as withdraw your consent at any time when it is the basis for processing, without affecting the lawfulness of prior processing. Write to us at info@dizabyte.es; we will respond within a maximum of one month (extendable by two more in complex cases, with notice to you).

From My profile you can also, with one click, export all your data as JSON or CSV (portability) and delete your account along with all its data (erasure).

If you believe we have not properly handled your request, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

9. Cookies and local storage

We exclusively use technically necessary storage to keep you logged in and remember interface preferences. We do not use advertising or third-party tracking cookies. The payment gateway may set its own cookies during the purchase process. Full details are in our cookie policy.

10. Changes to this policy

We will publish any update on this page, indicating the date of the last revision, and will notify you if the change is substantial.