Privacy
Privacy Policy
Last updated: [DATE]. This document explains what personal data iowii collects, for what purposes, for how long, and what rights you have under the General Data Protection Regulation (GDPR).
Data controller
The controller responsible for processing your personal data is [COMPANY LEGAL NAME], registered at [FULL ADDRESS], tax identification number [TAX ID]. For any privacy question or to exercise your rights, contact [PRIVACY/DPO EMAIL].
- Legal identity: [COMPANY LEGAL NAME]
- Privacy contact: [EMAIL]
- Registered office: [ADDRESS]
Data we collect
We collect the data you provide directly (name, email, password, transactions, accounts, goals you record) and technical data generated by using the service.
- Account: name, email, encrypted password
- Financial data you enter: transactions, accounts, budgets, goals
- Technical data: IP address, device type, usage logs
Purpose and legal basis
We process your data to provide the contracted service (contract performance, GDPR Art. 6(1)(b)), to comply with legal obligations, and, where applicable and with your consent, for optional communications.
- Performance of the iowii usage contract
- Compliance with legal and tax obligations
- Consent for optional communications (you can withdraw it at any time)
Retention period
We retain your data for as long as your account remains active. After account closure, data is deleted or anonymized within [RETENTION PERIOD], unless a longer legal retention obligation applies.
- Account data: until closure + [PERIOD]
- Tax records: per the applicable legal period in Portugal
Your rights
You have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and you can file a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority. To exercise any right, contact [PRIVACY EMAIL].
- Access, rectification, and erasure of your data
- Portability and objection to processing
- Complaint to the CNPD (www.cnpd.pt)