Privacy policy

David Ignacio García García is the controller of Smart Finance. This version is a private pilot for managing his own finances and is not open to the public or third-party bank accounts.

For privacy matters, contact david.garcia001@gmail.com.

• Identity, session, workspace, role and audit information.
• Connected accounts, consents, balances and bank transactions.
• Invoices, receipts, selected emails, expenses, income, projects and trips.
• OCR or AI proposals and the corrections made by the user.

Data is used to import and reconcile transactions, organise evidence, prepare expense reports and provide financial control. Processing is based on the user's request and consent and, for security and traceability, the legitimate interest in keeping the service protected and auditable.

Enable Banking acts as the account information provider for authorised connections. Smart Finance does not request or store bank passwords, OTPs or SCA credentials. The user authenticates and consents only on the official bank or provider pages.

Technical providers include Clerk, Neon, Cloudflare and Vercel. They receive only the data needed to provide authentication, database, storage, API and hosting services, subject to access controls and applicable contractual safeguards.

Data is retained while needed for the pilot, applicable accounting duties or the defence of legal claims. Bank consents may be revoked and data may be deleted when no longer needed, unless a legal retention duty applies.

Controls include workspace isolation, resource-level authorisation, encryption in transit, secrets outside source code, auditability and human review for high-impact outputs.

You may request access, correction, deletion, restriction, objection or portability through the contact email. You may also withdraw a bank consent without affecting prior processing and lodge a complaint with the Spanish Data Protection Agency.