Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Invoxaco Biz Solution ("we", "us") collects, uses and protects your personal data when you use Finanzalife (the "Service"). We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and applicable US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller

Invoxaco Biz Solution is the data controller for personal data processed through the Service. Contact: via our Contact page or the company email listed there.

2. Data We Collect

• Account data: name, email address, hashed password.
• Financial data you enter: incomes, expenses, budgets, savings goals, loans and related notes. We never connect to your bank; you control every record.
• Billing data: subscription plan and payment status. Card details are processed directly by Stripe or PayPal — we never store card numbers.
• Technical data: IP address, browser type, and cookies necessary for login sessions and security.

3. Legal Bases (GDPR/UK GDPR)

• Contract: to provide the Service you subscribed to.
• Legitimate interests: security, fraud prevention, service improvement.
• Consent: optional analytics/marketing cookies (you may withdraw at any time).
• Legal obligation: tax and accounting records.

4. How We Use Your Data

To operate your account, process subscriptions, provide support, send essential service emails, and — only with consent — measure marketing performance (e.g., Meta Pixel, Google Analytics).

5. Sharing

We share data only with processors needed to run the Service: our hosting provider (Hostinger), payment processors (Stripe, PayPal) and email delivery providers. We never sell personal data. Within a family account, each member's records are private; other members can only see data the family administrator explicitly grants access to.

6. International Transfers

Where data is transferred outside the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses.

7. Retention

Account data is kept while your account is active and deleted or anonymized within 90 days of account deletion, except where law requires longer retention (e.g., invoices).

8. Your Rights

Depending on your location you may have the right to access, correct, delete, port, or restrict processing of your data, to object to processing, and to withdraw consent. California residents may also opt out of "sharing" for cross-context advertising and will not be discriminated against for exercising rights. To exercise any right, contact us via the Contact page. You may lodge a complaint with your supervisory authority (e.g., the ICO in the UK).

9. Security

We use encrypted connections (HTTPS), hashed passwords (bcrypt), role-based access control and audit logging. No system is 100% secure; notify us immediately of any suspected breach of your account.

10. Children

The Service is not directed at children under 16. Family member accounts must be created for persons 16 or older, or by a parent/guardian where local law permits.

11. Changes

We will notify you of material changes by email or in-app notice before they take effect.