B
Begrootlab

Privacy policy

Last updated: September 25, 2026

Data controller

Begrootlab, info@budget-buddy.live is the controller of your personal data (GDPR).

What we collect and why

Account: email address and (hashed) password or Google sign-in — to create your account and sign you in (contract).

Planner data: business name and amounts you enter — to provide the service (contract).

Subscription status: whether your plan is active and until when (contract).

Technical data: IP address and country code to choose your language, and logs for security and fraud prevention (legitimate interests). Your IP address is not stored for this.

Support messages when you contact us (legitimate interests).

Who we share with

Hosting and database providers that run our service (processors).

Paddle.com as Merchant of Record for sales, subscriptions, payments, tax and invoicing. Paddle processes payment details itself.

Google, only if you choose Google sign-in.

Professional advisers (legal, accounting) and authorities where required by law.

We never sell your data.

International transfers

Some providers may process data outside the EEA (e.g. in the US), based on an adequacy decision (EU-US Data Privacy Framework) or Standard Contractual Clauses.

Retention

We keep your data while your account exists. If you delete your account we erase your data within 30 days, except what we must keep by law (e.g. invoice records, 7 years).

Your rights

You have the right to access, rectify, erase, restrict, port and object to processing, and to withdraw consent. In Account settings you can download your data and delete your account yourself. For other requests email us; we respond within one month. You may also complain to your data protection authority.

US residents (including California, CCPA/CPRA): you have the right to know what we collect, to delete and correct it, and not to be discriminated against for exercising your rights. We do not sell or "share" personal information for advertising.

Security

We use encrypted connections (HTTPS), encrypted storage, per-user access control and least-privilege access.

Cookies

We only use essential cookies and local storage. See our cookie policy.