Privacy

Who is responsible

Bohdan Sadolinskyi, a private individual and the owner of Finstream, is responsible for your data.

What is stored

The transactions your banks send or you enter yourself: amount, currency, date, description, merchant, category, tags, notes. Accounts and balances, rules, limits and settings.

Bank tokens and access passwords — encrypted only. Your email, your password (as a hash only), passkeys, the authenticator app's secret (encrypted) and your Telegram id, if the bot is linked.

Sign-in sessions — browser, IP address and time — so you can see where Finstream is open and close what shouldn't be.

Bank and Google Wallet notifications you switch on in the Finstream app on your phone. Notifications with verification codes are not stored.

Where

On one Hetzner server in Falkenstein (Germany, EU). Every night a backup of the database is made on the same server; a second layer is Hetzner's snapshots of the whole server.

Who sees it

Only you see your transactions. The owner of the service sees metadata in the admin: your email, when you last signed in, how many connections and transactions you have, the state of the connections and processing error codes — but not the amounts, descriptions or merchants.

There is one exception: notifications from a bank Finstream can't read yet. The service owner may look at them to teach Finstream that bank.

As the server's administrator the owner technically has access to the database; Finstream gives him no screen with your transactions.

What goes to whom

Anthropic — merchant names, the operation's description as the bank writes it, the amount, the date and the MCC, to pick a category automatically. No card numbers, balances or your email; a transfer's description may carry a person's name, as the bank wrote it. When you ask Finstream something in Telegram, type a transaction in words, prepare a review or a monthly plan, or send a receipt photo or a payslip, Anthropic gets what that needs: your words, the transactions and amounts involved, the photo or the file. To learn to read a new bank's phone notifications, Finstream sends Anthropic a few of those notifications with card numbers masked.

Claude — if you connect Claude to Finstream (with the connector or an access token), Claude reads your data when you ask it to; from there Anthropic's terms apply. To revoke access: “Settings → Profile → Access for Claude”.

QMailing — the bank's letters you forward to your connection's address; Finstream receives them from there. Finstream also sends its own emails through QMailing: email confirmation and password reset.

Telegram — the messages the bot sends you, and what you write to the bot.

Google — sign-in only: your email and Google's confirmation, if you sign in with Google. The login page then loads Google's script.

Cloudflare — all of the site's traffic goes through it: it provides HTTPS and protection from attacks, so it sees the IP address, browser and page address of every request. When you register with a password, it also checks that a person, not a program, fills in the form.

Anthropic, Cloudflare and Google are US companies: what they get leaves Ukraine and the EU.

Nobody else. Your data is not sold. Finstream has no ads and no analytics.

Cookies

A session cookie to sign in, and two for convenience: the language and the collapsed menu. The theme is kept in the browser itself.

How long it is kept

Your data is kept while your account exists.

“Settings → Profile → Delete account” deletes everything of yours at once: transactions, accounts, connections, rules, sessions and Telegram. The same page lets you download all your data as a file first.

Your connections' QMailing mailboxes are deleted by the owner by hand — a letter with their addresses goes to him. Nightly backups that still hold your data are overwritten within 14 days.

Your rights

You see, correct, download and delete your data in Finstream itself. Questions or requests — [email protected].