Privacy Policy

The data controller for the Service is [Company legal name], [registered business address]. For any privacy question or to exercise the rights described below, contact us at legal@noviq-finance.com.

Account data: first and last name, email address, phone number, and your password, which we store as a salted hash and never in plain text.

Profile data from onboarding: your account type (personal or business) and, depending on type, either an income band and expense band (personal accounts), or your company name, legal structure, and self-reported monthly revenue and expenses (business accounts), plus a few product-interest questions such as main usage and foreign-currency share.

Referral data: your own referral code and, if someone invited you, the code you signed up through. If we approve you as an affiliate, we record that status too.

Anything you send us directly, for example in a support request.

Technical data created automatically, such as login timestamps and the cookies described in the Cookies section below.

To create and administer your waitlist account and profile — necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

To operate the referral program and show you your invite count — performed at your request (Art. 6(1)(b) GDPR).

To detect and prevent fraud, such as fake accounts created to abuse the referral program — our legitimate interest (Art. 6(1)(f) GDPR).

To prepare aggregated, anonymized statistics for potential banking and financing partners so we can negotiate a real product on your behalf — our legitimate interest (Art. 6(1)(f) GDPR); see the next section for how this is anonymized.

Where you have given specific consent, for example for optional cookies should we introduce any in the future — consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Supabase, which hosts our database and handles authentication, processes account and profile data on our behalf.

We have appropriate data processing agreements in place with our processors. We do not sell your personal data, and we do not share it with advertisers.

Some of the processors we use may process data outside your country of residence, including in the United States. Where that happens, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses or an equivalent adequacy mechanism, to protect your data.

To evaluate a future banking or financing partnership, we may generate a statistical export of waitlist data for prospective partners. This export never includes your name, email address, phone number, or password — only anonymized, aggregate-level fields, such as account type, banded income or expense information, and whether you joined via a referral, that cannot reasonably be used on their own to identify you.

We keep your account data for as long as your waitlist account exists. You can delete your account yourself at any time from your account settings. Once you do, we retain your data for up to 180 days — during which you can restore the account by logging back in — before permanently deleting it. If our product does not launch, we handle your data the same way. We may retain records for longer where required by law, for example for accounting or other legal obligations.

Subject to the conditions set out in applicable law, you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, request a portable copy of your data, object to or restrict certain processing, and withdraw consent at any time where processing is based on consent. You can also correct most of your profile data yourself at any time from your account.

To exercise any of these rights, contact us at legal@noviq-finance.com. If you are located in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and salted password hashing. We also temporarily lock an account after several failed login attempts to make automated password guessing harder. No system is completely secure, but we take reasonable steps to protect your information against unauthorized access, loss, or misuse.

The Service is not directed at, and we do not knowingly collect data from, anyone under 18 years of age.

We only use cookies and browser local storage that are strictly necessary to run the Service: keeping you signed in, remembering your language, remembering the referral code you signed up through, and remembering your cookie choice. We do not currently use analytics, advertising, or tracking cookies. If that changes in the future, we will ask for your consent first through the cookie banner. The table below lists every cookie and local storage entry we currently use.

We may update this policy as the Service evolves. We will update the date at the top of this page and, for material changes, provide a more prominent notice.

Questions about this policy? Email us at legal@noviq-finance.com.