Your Privacy Rights
Effective date: June 25, 2025
Depending on where you live, you have specific legal rights over your personal data. This page explains those rights and how to exercise them.
1 Lawful Basis for Processing (GDPR / UK GDPR)
Under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), we must have a lawful basis for processing your personal data. Finent processes your data under the following bases:
| Processing activity | Lawful basis |
|---|---|
| Creating and maintaining your account | Contract — processing is necessary to perform the service you have requested (Art. 6(1)(b)) |
| Storing financial data you enter (income, expenses, goals, etc.) | Contract — the service cannot function without storing the data you provide (Art. 6(1)(b)) |
| Sending account confirmation and password-reset emails | Contract — necessary to deliver the service and protect your account (Art. 6(1)(b)) |
| Sending bill-reminder notifications (if enabled) | Consent — you explicitly opt in to reminders and may withdraw consent at any time (Art. 6(1)(a)) |
| Application error logging | Legitimate interests — necessary for maintaining the security and stability of the service (Art. 6(1)(f)) |
2 Data Controller
The data controller responsible for your personal data is:
Alex Sanderson
Operating Finent as an individual / open-source project maintainer
3 Your Rights Under GDPR / UK GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR and UK GDPR:
Right of Access (Art. 15)
You have the right to obtain confirmation of whether we process your data and to receive a copy of it. You can download all data we hold about you directly from your account settings.
Right to Rectification (Art. 16)
You have the right to correct inaccurate personal data. You can edit all financial records and account information directly within the application at any time.
Right to Erasure (Art. 17)
You have the right to request the deletion of your personal data. You can permanently delete your account and all associated data immediately.
Right to Restriction (Art. 18)
You have the right to request that we restrict processing of your data in certain circumstances — for example, while you contest its accuracy. Contact us to make such a request.
Right to Portability (Art. 20)
You have the right to receive your data in a structured, commonly used, machine-readable format. Download your full data as JSON from your account settings, or export records as CSV from the Export section.
Right to Object (Art. 21)
Where we process your data based on legitimate interests, you have the right to object. As Finent does not use your data for direct marketing or profiling, the practical scope of this right is limited. Contact us with any objection.
Right to Withdraw Consent (Art. 7(3))
Where processing is based on your consent (e.g., bill-reminder emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Disable reminders in Account Settings.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office (ICO). In the EU, contact your national data protection authority.
4 Your Rights Under the CCPA (California Residents)
If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
Right to Know
You have the right to know what personal information we collect, the purposes for which it is used, and whether it is disclosed to third parties. See our Privacy Policy for full details.
Right to Delete
You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. You can delete your account and all associated data at any time from Account Settings.
Right to Correct
You have the right to correct inaccurate personal information that we hold about you. You can edit all records and your account details directly within the application.
Right to Opt Out of Sale
Finent does not sell your personal information to any third party. We do not share your data for cross-context behavioural advertising. No opt-out action is required.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Exercising your privacy rights will not affect your access to or experience of the Service.
Right to Limit Use of Sensitive Data
Finent does not use your financial data for any purpose beyond delivering the service to you. We do not share it with third parties for secondary purposes. No opt-out action is required.
To exercise any CCPA rights, contact us at asanderson1994s@gmail.com. We will respond to verifiable consumer requests within 45 days as required by law.
5 How to Exercise Your Rights
Many rights can be exercised directly within your account:
- Download your data — Account → Personal Data → Download
- Delete your account — Account → Personal Data → Delete Account
- Edit your data — directly within the relevant section of the application
- Withdraw consent for reminders — Account → Bill Reminders
For rights that cannot be fulfilled within the application (such as restriction of processing or data portability in a specific format), contact us directly:
We will respond to all verifiable data subject requests within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request.