Privacy Policy

Last updated: 2026-07-18

This Privacy Policy explains how abacova processes your personal data when you use our website and our personal finance management application (the "Service"). We take the protection of your data very seriously, especially since it involves financial information.

The Spanish version is the binding version of this Policy. Versions in other languages are translations provided for convenience; in case of discrepancy, the Spanish text prevails.

1. Data controller

The controller responsible for the processing of your data is:

• Ignacio Berenguer García, trading under the business name abacova (sole trader / self-employed).
• NIF: 07239146B.
• Contact email: support@abacova.com

You may reach out to that address for any matter relating to your data or to this Policy.

2. What data we process

We process the following categories of data:

• Account and identity data: your name and email address, managed through our authentication provider.
• Profile and preference data: language, time zone and application settings.
• Financial data that you enter: accounts, transactions, categories, budgets, debts and other information you record in the Service.
• Bank connection data (optional): if you connect a bank account through an aggregator, the account and transaction information that said aggregator provides to us with your consent.
• Payment data: when you subscribe to a paid plan, the transaction data is processed by our payment provider; we do not store the complete details of your card.
• Usage and technical data: activity logs, IP address, device and browser type, and diagnostic and error data.

3. For what purpose and on what legal basis

We process your data to:

• Provide the Service and manage your account — legal basis: performance of the contract.
• Process payments and billing — legal basis: performance of the contract and legal obligation.
• Maintain security, prevent fraud and debug errors — legal basis: legitimate interest.
• Send service communications (notices, reminders, summaries) — legal basis: performance of the contract or consent where required.
• Analyze site usage to improve it — legal basis: consent (see the cookies section).
• Comply with legal obligations (for example, retention of invoices) — legal basis: legal obligation.

4. Processors and providers (sub-processors)

To provide the Service we rely on providers that process data on our behalf. Each one processes only the data necessary for its function:

• User authentication: manages registration and sign-in.
• Payment provider: processes payments and billing for paid plans.
• Transactional email delivery: delivers the Service's emails.
• Hosting: servers where the application and the database run.
• Error tracking and technical logs: diagnostic tools.
• Bank aggregators: if you use the bank connections, one or more open banking aggregators access, with your consent, the information of your accounts to import transactions.
• Artificial intelligence: the AI features are optional. When you use your own model or key ("bring your own model"), your data is sent to the AI provider that you choose, not to a provider of ours. If you use an AI feature with a default managed provider, we will inform you of the corresponding provider; under no circumstances is your data used to train third-party models.
• Web analytics: as anticipated, we will use Google Analytics 4 to measure site usage, subject to your consent (see the cookies section).

5. International transfers

Some of our providers are located outside the European Economic Area (for example, in the United States). When this involves an international transfer of data, we ensure that an adequate safeguard is in place, such as the Standard Contractual Clauses approved by the European Commission or an adequacy decision.

6. Cookies and analytics

We use technical cookies necessary for the operation of the site. As anticipated, we will incorporate Google Analytics 4 to understand how the site is used; this analytics uses cookies and will only be activated after obtaining your consent by means of a cookie notice with "Accept" and "Reject" options. You can change your choice at any time.

7. Retention and deletion

We retain your data while your account is active. You may request the deletion of your data by writing to support@abacova.com; we will address your request within a maximum of 30 days, except for data that the law obliges us to retain (for example, invoices for tax purposes). In this first version, deletion is a process handled through support (there is not yet a self-service account deletion button).

8. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent when the processing is based on it. To do so, write to us at support@abacova.com.

If you believe that we have not processed your data correctly, you have the right to lodge a complaint with the supervisory authority, the Spanish Data Protection Agency (AEPD) — www.aepd.es.

9. Minors

The Service is intended for people over 18 years of age. We do not knowingly collect data from minors below that age.

10. Changes to this Policy

We may update this Policy occasionally. We will publish the current version on this page and indicate the date of the last update. If the changes are significant, we will notify you through appropriate means.

11. Contact

For any matter relating to this Policy or to your data, write to us at support@abacova.com.