Privacy Notice

Personal data we collect

• Account data: your name and email address, used to create and identify your account.
• Login credentials: your password is stored only in secure, hashed form by our authentication provider.
• Business and financial data: the companies, ledgers, daily reports, income, expenses, assets, maintenance logs and other records you enter into the app.
• Support and communication data: messages you send us when asking for help.
• Technical data: IP address, device and browser type, and basic usage telemetry needed to operate and secure the Service.

Why we use your data and our legal basis

• To create your account and provide the Service — performance of our contract with you.
• To process subscriptions, payments and cancellations — performance of our contract, handled by our Merchant of Record (see below).
• To secure the Service and prevent fraud and abuse — our legitimate interests.
• To improve the Service and provide customer support — our legitimate interests.
• To comply with legal obligations — a legal obligation.

Who we share data with

We share personal data only with the following categories of recipients:

• Service providers and sub-processors that host the application and database and help us run the Service (including our hosting and database provider, Supabase, and our site platform).
• Dodo Payments, our payment processor, which handles subscription payments, billing and payment disputes. Dodo Payments acts as a controller for the payment data it collects; we never receive your card or bank details.
• Professional advisers (legal, accounting) under confidentiality.
• Authorities, where disclosure is required by law.

International transfers

Your data may be processed outside your country. Where personal data leaves the UK, EEA or a comparable jurisdiction, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses agreed with our service providers.

How long we keep your data

We keep account and business data for as long as your subscription is active. If you delete your account, we delete your business and financial data. We keep basic billing records for the period required by tax and accounting law, after which data is deleted or anonymised.

Your rights

Depending on where you live, you have rights over your personal data, including the right to access it, correct it, delete it, restrict or object to its processing, request a copy in a portable format, and withdraw consent where processing is based on consent. You can also lodge a complaint with your local data protection authority.

To exercise any right, contact us at hello@valofinance.app. You can also delete your account and all associated business data directly from the Profile page inside the app. We respond to requests within one month.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security so your financial records are visible only to you.

Cookies

The Service uses essential cookies and local storage to keep you signed in and remember your preferences (such as your theme). We do not use advertising or cross-site tracking cookies. You can manage or clear these through your browser settings.