Privacy policy

The company named at the foot of this page is the controller for the data described here. Write to us at the address there with any question about it.

When you take a beta seat: your name, email address, and your business name if you give it. We use them to hold your seat and to write to you about it. The ground is the contract between us — without them there is no seat.

When you connect a bank account or a mailbox: the transactions and the invoices and receipts we find, and what we read out of them — supplier, dates, amounts, VAT. We use them to do the one thing the product does. The ground is again the contract.

Card details:handled by Stripe, not by us. We keep only Stripe's customer reference, never your card number.

Stripe, for the card. Our hosting and database providers, who store it for us. Nobody else: we do not sell personal data and we do not use it for advertising.

Where a provider is outside the EEA, the transfer rests on the European Commission's standard contractual clauses.

Your account data for as long as you have an account, and then no longer than a year. Bookkeeping records that Dutch law requires us to keep, for as long as it requires. Delete your account and the rest goes.

A copy of your data, a correction, deletion, a restriction on what we do with it, your data in a portable form, and an objection to any of it. Write to us and we answer inside a month.

If we handle it badly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Finlyt sets only the cookies it needs to keep you signed in and to remember your language. There is no advertising or analytics tracking on this site, which is why you are not being asked to consent to any.

Connections are encrypted in transit, access to production data is limited to the people who run the service, and we never store your bank credentials — bank connections go through the bank's own authorisation.