Privacy policy

Last updated: May 2025

1. Data controller

Eligi SAS, Paris. DPO contact: [email protected].

2. Data collected

Tenant identity, aggregated bank data via PSD2 APIs (never your credentials), timestamped verification report. For professionals: email, logs, billing.

3. Legal bases

Contract performance, legal obligation (PSD2, anti-fraud), legitimate interest (security), consent (marketing).

4. Retention

Reports: 12 months. Pro accounts: contract duration + 3 years. Billing: 10 years.

5. Your rights (GDPR)

Access, rectification, erasure, restriction, portability, objection. You may lodge a complaint with your national supervisory authority.

6. Security

TLS and at-rest encryption, role-based access, EBA RTS compliance for bank data access.