Privacy Policy

1. Who We Are

Accordez is a personal finance tracking application operated from Brussels, Belgium. When we say "we," "us," or "our," we mean the Accordez service and its operators.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect only what is necessary to provide the service:

• Account data — your name, email address, and optional profile photo when you sign up
• Agreement data — loan amounts, schedules, notes, and payment records you create in the app
• Document uploads — files you attach to agreements, stored securely in encrypted cloud storage
• Billing data — your subscription status and payment method details (handled directly by Stripe — we never store card numbers)
• Usage data — basic analytics such as feature usage and error logs to improve the service
• Communications — messages you send via the in-app contact form

3. Why We Process Your Data

We process your personal data on the following legal bases:

• Contract performance — to provide you with the Accordez service you signed up for
• Legitimate interest — to improve the product, prevent fraud, and ensure security
• Legal obligation — to comply with applicable laws and regulations
• Consent — for optional features like SMS notifications (you can withdraw consent at any time)

4. Third-Party Services

We use trusted third-party providers to run Accordez. Each receives only the data necessary for their function:

All providers processing data outside the EU are bound by Standard Contractual Clauses (SCCs) ensuring GDPR-equivalent protections.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data is permanently deleted within 30 days, except where retention is required by law (e.g. billing records for tax purposes, retained for 7 years under Belgian law).

6. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — export your data in a machine-readable format (CSV export available in-app)
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — for consent-based processing (e.g. SMS), at any time

To exercise any of these rights, use the in-app contact form or email us at support@accordez.app. We will respond within 30 days.

7. Cookies & Local Storage

Accordez uses minimal cookies for essential functions only:

• Authentication session (required for login)
• Language preference
• Theme preference (light/dark)

We do not use advertising cookies or third-party tracking cookies.

8. Security

We take security seriously. All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and audited. Payment data is handled exclusively by Stripe and never passes through our servers.

9. Children

Accordez is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.

11. Complaints

If you believe your data rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) at www.dataprotectionauthority.be.

12. Contact

For any privacy-related questions or requests, contact us through the in-app contact form or at support@accordez.app.