privacy policy
1. Data controller
Piastro ("we") is responsible for processing personal information collected through the app and website.
2. Information collected
- Account information (e.g., email, encrypted password, preferences).
- Financial data entered by the user (e.g., transactions, categories, budgets).
- Minimal technical data (e.g., truncated/anonymized IP address, device and browser type).
- Aggregated and anonymized usage data (e.g., pages viewed, traffic volume).
Features
- Provide and operate the service (authentication, dashboards, analytics).
- Improve performance, security, and user experience.
- Communicate with you (support, service notifications).
- Privacy-friendly audience measurement, without cookies or individual tracking.
4. Sharing
We use service providers strictly necessary for operating the site and application (hosting, security, and audience measurement). These providers are required to comply with confidentiality and security obligations. Shared data is limited to what is strictly necessary.
Piastro's primary hosting is in Quebec (Beauharnois) with OVHcloud. Data is stored on servers located in Quebec.
5. Audience measurement (without cookies)
Piastro uses a privacy-friendly audience measurement tool (Rybbit). This tool sets no cookies, uses no local storage (localStorage or equivalent), and does not allow individual user tracking across sites or sessions.
Transmitted technical information is limited to what is strictly necessary and may be processed by the provider in the jurisdiction where it operates. In accordance with applicable frameworks (GDPR and Quebec Law 25), this type of anonymized audience measurement does not require displaying a cookie consent banner.
6. Retention
We retain data as long as necessary to provide the service, meet legal obligations, resolve disputes, and enforce our agreements.
7. Security
We implement reasonable measures (access controls, encryption in transit, monitoring) to protect your personal information. However, no system is infallible.
8. Your rights
- Access and correct your information.
- Withdraw your consent where applicable.
- Request deletion of your account, subject to legal obligations.
- Obtain information about technologies used for audience measurement.
9. Contact
For any privacy-related question or request, contact us via the Contact page.