2. What this policy covers

• Personal data we collect directly from you (e.g., during registration, account connection)

• Financial or banking data if you connect your accounts for iBudgex to aggregate your transactions, budgets, etc.

This Policy does not apply to the practices of third-party companies we do not control.

3. Personal data collected

Here are the main categories of data we may collect:

• Profile / contact data: First name, last name, email address, login credentials

• Payment data (if applicable): If the user pays for services: card type, last 4 digits, expiry date, billing address, email, phone number

• Financial / banking data: Account balances, transaction history, debts, credit, and other financial data necessary for aggregation or budget tracking

• Device / connection data: IP address, device type, browser/OS type, device identifier

• Usage / analytics data: Pages visited, interactions, referral source, session duration, anonymized data on site/app usage

• Other voluntarily provided data: Notes, comments, questionnaire responses, photos (if voluntarily submitted by the user), etc.

We will only collect data necessary to provide, maintain, and improve our services.

4. How data is collected

• Directly from you: when creating an account, connecting your bank accounts, using the tools, or through forms.

• Automatically: via cookies, web beacons, server logs, technical metadata, usage data, etc.

• Via authorized third-party providers: for example, to synchronize your bank accounts or for payment processing.

5. Purposes of data collection and use

We use your data to:

• Provide, personalize, and improve the Services (bank aggregation, budget, interface, alerts, etc.).

• Manage your user account.

• Process payments if applicable.

• Ensure security and fraud detection.

• Conduct internal analyses, testing, and product development.

• Communicate with you (notifications, support, information about the Services).

• Inform you of updates, changes, or new features.

We do not collect or use your data for unrelated purposes without informing you or obtaining your consent, unless required by law.

6. Data sharing

We will never sell your personal financial data. However, we may share your data with:

• Service providers (hosting, payment, support, analytics providers, etc.) who help us deliver the Services.

• Providers you authorize, for example if you choose to connect a bank account or a third-party service.

• Partners (with your consent), for analytics, marketing, or service improvement purposes.

• Legal authorities if necessary to comply with legal obligations, investigations, or court orders.

• In the context of a merger, acquisition, or business transfer — in which case we will inform you of any changes.

We may also use aggregated or anonymized data (which cannot identify a user) for analyses, reports, or statistics.

7. Cookies and tracking technologies

We use cookies and other technologies (beacons, pixels, etc.) to:

• Ensure the operation of essential features (login, preferences, security).

• Remember your preferences (language, settings, etc.).

• Analyze site or app usage (pages visited, referral source, time spent).

• Improve our services and measure the effectiveness of our marketing campaigns.

You can configure your browser to refuse cookies or delete existing ones. However, this may result in limited functionality of the Services.

8. Data security and retention

• We implement reasonable technical, physical, and organizational measures to protect your data against unauthorized access, disclosure, loss, or modification.

• We retain your personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, or collect fees.

• If retention is no longer necessary, data will be deleted or anonymized depending on the context.

9. Your rights (depending on jurisdiction)

Depending on your country of residence (e.g., Quebec / Canada), you may have rights regarding your personal data:

• Access: you may request what personal data we hold about you.

• Correction: you may request the correction of inaccurate data.

• Deletion: you may request the deletion of your data where possible.

• Withdrawal of consent: for certain purposes (e.g., marketing, advertising).

• Portability, restriction of processing, or objection: as applicable under relevant laws.

To exercise these rights, contact us at: [email protected].

10. Policy updates

We may update this Policy from time to time. If the changes are significant, we will notify you via the email address associated with your account or via an in-app notification. We will also publish the update date at the top of this page.

11. Contact

If you have any questions, concerns, or requests related to privacy — access, correction, deletion, opt-out, etc. — please contact us at: [email protected].