Envido (referred to herein as "We", "Our" or "Us") is a personal finance and budgeting service operated by Codeware OÜ, a company registered in Tallinn, Estonia (registration number 16643846, registered address Rõugu 2/2-12, Tallinn, Estonia, 13522). We respect your privacy and are committed to protecting it through compliance with this Privacy Policy and the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect through www.envido.eu (the "Website" or "Service"), why we collect it, who we share it with, where it is stored, and the rights you have over it.

Please read this policy carefully. By accessing or using the Website, you agree to this Privacy Policy. This policy may change from time to time; material changes will be posted on the Website and, where appropriate, notified to you by email. Those who visit our Website without registering an account are "Visitors." Those who register or log into an account are "Users." Together with our Terms of Service, this Privacy Policy governs your use of the Service.

1. Information We Collect

We collect the following categories of personal data:

• Account information: your name, email address, password (stored as a bcrypt hash, never in plain text), and language preference.
• Financial information via open banking: when you connect a bank account, our regulated open-banking partner, GoCardless Ltd (United Kingdom), provides us with read-only access to your account details, balances, and transaction history. We never see, receive, or store your online banking username, password, or other login credentials — those are entered directly with your bank or through GoCardless's own secure, regulated authorization flow.
• Information you enter directly: budgets, categories, tags, notes, and any other data you create within the Service.
• Sign-in via Google or Facebook: if you choose to register or sign in with a Google or Facebook account, that provider shares your name and email address with us to create and authenticate your Envido account. We do not request or receive access to your wider Google or Facebook account, contacts, or posts.
• Payment information: if you subscribe to a paid plan, payment is processed by Stripe. We do not receive or store your full card number — Stripe provides us only with a billing status and payment reference.
• Communications: information you provide when you contact us, submit the contact form, or subscribe to our newsletter.
• Technical data: IP address, browser type, device type, and usage data, collected automatically via cookies where you have consented to them (see our cookie preferences).

2. How We Use Information

• To provide and operate the Service — syncing bank accounts, categorizing transactions, and generating budgets and reports.
• To power optional AI features (automatic transaction categorization and the AI financial coach). When you use these features, the relevant data (such as a transaction description or your chat message) is sent to our AI infrastructure provider, OpenRouter, which routes the request to the underlying language model provider currently configured for that feature (for example, Anthropic or OpenAI). This data is used only to generate the response for you.
• To send transactional emails — confirmations, sync and reconnection notices, and security alerts — via Postmark.
• To send newsletter or product-update emails via MailerLite, only if you have opted in. You can unsubscribe at any time using the link in any newsletter email or from your account settings.
• To protect the Service from spam and automated abuse on sign-up and contact forms, using Cloudflare Turnstile.
• To bill and manage subscriptions via Stripe.
• To comply with a legal obligation, or with your consent, for any other purpose we disclose to you at the time.

You are in control of your data. You may delete your Account at any time from Settings — see Section 6 for what happens when you do.

3. Who We Share Data With

We do not sell your personal data. We share personal data only with the following service providers ("sub-processors"), each acting on our behalf and only to the extent needed to provide the Service:

• GoCardless Ltd (UK) — open banking / bank account data
• Stripe — subscription payment processing
• Postmark — transactional email delivery
• MailerLite — newsletter and product-update email (opt-in only)
• Cloudflare (Turnstile) — bot and spam protection
• OpenRouter, and the underlying AI model providers it routes requests to (e.g. Anthropic, OpenAI) — AI categorization and AI coach features
• Google LLC / Meta Platforms, Inc. — only if you choose to sign in with a Google or Facebook account

We may also disclose personal data where required to comply with applicable law or a valid legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of Envido, our users, or others.

4. Where Your Data Is Hosted

Our application, database, and file storage are hosted on servers located in Germany, within the European Union, operated by Hetzner Online GmbH. Some of the sub-processors listed in Section 3 are located outside the EU/EEA, primarily in the United Kingdom and the United States. Where personal data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses, an adequacy decision, or another legally recognized safeguard. You can request more information about these safeguards by contacting us (Section 9).

5. Data Security

We take appropriate technical and organizational measures to protect your data, including encryption, access controls, and read-only bank connections. For full details, see our Data Security page.

6. Data Retention and Deletion

You can delete your Account at any time from Settings. When you do, your Account, any connected bank links, and your associated financial data (transactions, categories, budgets) are permanently deleted, except for the limited records we are legally required to retain — for example, invoices and payment records needed for tax and accounting compliance, which we keep only for the period required by law. If you disconnect a bank account without deleting your Account, we stop syncing new data from it; previously imported data remains under your Account until you remove it or delete your Account entirely.

7. Your Rights

As a data subject under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectification of inaccurate or incomplete data;
• Erasure of your data ("right to be forgotten"), subject to our legal retention obligations described in Section 6;
• Restriction of how we process your data;
• Object to processing based on legitimate interest or for direct marketing;
• Data portability — request a copy of your data in a structured, machine-readable format;
• Lodge a complaint with your local data protection authority — for users in Estonia, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise any of these rights, contact us using the details in Section 9.

8. Children's Privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Contact Us

If you have questions, comments, or concerns about this Privacy Policy, or want to exercise any of the rights described in Section 7, contact Codeware OÜ at info[at]envido.eu, or by post at Rõugu 2/2-12, Tallinn, Estonia, 13522.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Non-material changes (such as clarifications) become effective when posted; material changes become effective 30 days after posting, or sooner where required by law. The date at the top of this page always reflects the last revision. Your continued use of the Website after a change becomes effective constitutes acceptance of that change.