1. Information We Collect

We collect the following types of data: 

• Personal Data:  Name, email address, company information, contact details, and billing information.
• Account and Authentication Data:  Login credentials, multi-factor authentication tokens, API keys.
• Financial Data:  Account balances, transaction histories, and account metadata when you integrate via Open Banking or other APIs.
• Usage Data:  IP addresses, device/browser details, session timestamps, and activity logs.
• API Interaction Data:  Frequency of API calls, endpoint usage, rate-limiting behavior, and diagnostic errors.

2. How We Use Your Information

We use your data to: 

• Create and manage your account
• Deliver insights based on your financial data
• Monitor, improve, and personalize your user experience
• Secure your account and enforce API usage policies
• Comply with applicable laws and enforce our legal rights
• Send product updates, service notifications, and marketing messages (you may opt out)

3. Sharing of Information

We do not sell your data. We only share data: 

• With authorized subprocessors under strict confidentiality
• As required by law, subpoena, or regulatory request
• With acquirers or affiliates in the event of a merger or acquisition

4. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.

5. Security

We implement robust physical, electronic, and managerial procedures to protect your data. These include encryption, access controls, regular audits, and secure coding practices.

6. Your Rights

Subject to your jurisdiction, you may have the right to: 

• Access or update your data
• Request data deletion
• Object to or restrict processing
• Withdraw consent
• Lodge complaints with a data protection authority

7. International Transfers

Your data may be stored or processed outside your country of residence. We ensure appropriate safeguards are in place such as Standard Contractual Clauses or equivalent frameworks.

8. Children’s Privacy

Statement does not knowingly collect personal data from individuals under 16. If we become aware that we have collected such data, we will delete it promptly.

9. Changes

We may update this Privacy Policy periodically. Changes will be posted with an updated effective date.

10. Contact

For inquiries, email privacy@askstatement.com