Privacy notice | Foroba Labs

1. Who is responsible

The controller of your personal data is Foroba Labs, legal entity [TO CONFIRM], address [TO CONFIRM]. Privacy contact: [email protected].

2. What we process

Waitlist: your email, chosen apps and language, kept until you are invited or ask for deletion. Legal basis: consent.
Identifiers: your email address, display name and an internal user ID.
Financial data you connect or import: accounts, balances, transactions, budgets, goals, and investment positions.
Security data: hashed password, second-factor secrets, passkey public keys and session records.
Usage data: AI chat messages with Jeli and sign-in timestamps.
Technical data: error reports that may include a pseudonymous user ID.

3. Why we process it

To provide the services you ask for, to keep them secure, and to meet legal obligations. The legal basis for each purpose is [TO CONFIRM] by legal counsel.

4. Where it is stored

Application data is stored on servers in the European Union, protected by full-disk encryption. Sensitive fields get an additional layer of encryption. Backups are encrypted.

5. Who receives it

An EU open-banking provider, only when you choose to connect a bank.
Our hosting and backup providers, who store data on our behalf: [TO CONFIRM].
An email service provider for account emails: [TO CONFIRM].
Market-data providers receive only public ticker symbols, never personal data.

6. Artificial intelligence

Jeli processes your questions and figures on our own servers. They are not sent to an outside AI provider. See the AI disclosure.

7. How long we keep it

Retention periods: [TO CONFIRM]. When you delete your account we delete your data, except what the law requires us to keep.

8. Your rights

Under European data-protection law you can ask to access, correct, delete, restrict or export your data, and to object to certain processing. You can also complain to your data-protection authority. Write to [TO CONFIRM].

9. Transfers outside the EU

We aim to keep personal data in the EU. Any transfer outside it will be listed here: [TO CONFIRM].

10. Children

The services are not intended for people under 18.

11. Changes

We will update this notice when our practices change and tell you about material changes.