Introduction

At Fivarn, we understand that your financial information is deeply personal. When you're working on budget planning and investment decisions, you need to know exactly how your data gets handled. This isn't just legal paperwork – it's our commitment to being transparent about every piece of information we collect and why we need it.

We operate under Belgium's data protection laws and the General Data Protection Regulation (GDPR). But more importantly, we've built our privacy practices around what we'd want if we were in your shoes – clear explanations, real control over your data, and no surprises.

Information We Collect

We collect information in three main ways, and each serves a specific purpose in helping you manage your finances better:

• Account information you provide (name, email, phone number) when you sign up for our budget planning tools
• Financial goals and preferences you share to customize your investment recommendations
• Usage data about how you interact with our platform to improve the tools that aren't working well
• Communication records when you contact our support team for help with your account
• Device information and IP addresses for security purposes and to prevent unauthorized access

We don't collect sensitive financial account numbers or passwords to your banking accounts. Our focus is on helping you plan and track your financial goals, not managing your actual accounts.

How We Use Your Information

Every piece of data we collect has a specific job. We use your information to provide personalized budget recommendations, send you updates about your financial goals, and improve our platform based on what's actually helping people succeed.

We also use aggregated, anonymous data to understand broader patterns. For example, we might analyze which budgeting strategies work best for different age groups – but this analysis never includes identifying information about specific users.

Your Rights Under Belgian and EU Law

As someone using our services in Belgium, you have specific rights that we take seriously. These aren't just legal requirements – they're practical tools you can use to stay in control of your information.

Information Security

We protect your information using industry-standard security measures, but we also want you to understand what that actually means in practical terms.

All data transmission uses SSL encryption – the same technology banks use for online transactions. We store information on secure servers with restricted access, and our team receives regular security training. We also conduct quarterly security audits to identify and fix potential vulnerabilities before they become problems.

However, no online system is completely immune to security threats. We monitor for suspicious activity and will notify you immediately if we detect any unauthorized access to your account.

Data Sharing and Third Parties

We don't sell your personal information to marketing companies or data brokers. When we do share information, it's for specific reasons that directly benefit your use of our platform.

• Payment processors handle transaction security when you upgrade your account
• Email service providers deliver account notifications and financial tips you've requested
• Analytics tools help us understand which features are most helpful (using anonymous data only)
• Legal authorities may request information if required by Belgian law or valid court orders

All third-party services we use are required to meet the same privacy standards we follow, and we regularly review these partnerships to ensure they align with our commitment to protecting your information.

Data Retention and Deletion

We keep your information only as long as it's useful for providing our services or as required by Belgian financial regulations. Most personal data gets deleted within 90 days of account closure.

Some information needs to be retained longer for legal compliance – transaction records for tax purposes, for example. But even this information gets automatically deleted according to legal requirements, typically within seven years.

If you want to delete specific information before these standard timeframes, just contact us. We'll explain what can be removed immediately and what needs to stay for legal reasons.

International Data Transfers

Most of your data stays within the European Union, where it's protected by GDPR standards. When we do need to transfer information outside the EU – for example, to cloud storage providers with global infrastructure – we use approved safeguards like Standard Contractual Clauses.

These legal mechanisms ensure your information receives the same level of protection regardless of where it's physically stored. We can provide more details about specific data locations if you're interested.

Updates to This Policy

We review and update this privacy policy annually, or whenever we make significant changes to how we handle your information. When updates happen, we'll send you a notification explaining what's changed and why.

Major changes that affect your rights or how we use your data will include a 30-day notice period before they take effect. This gives you time to review the changes and decide if you want to continue using our services.