Only the French text prevails; any translation is given for information.
Your account: your address, your password as a hash, your language.
Your statement: your answers and their result, with no name or address. Passing each step is counted under an opaque identifier.
Your register: the assets, values, deadlines and contacts you enter, the accounts you enter or import, the members of your household, your projects, your tools and their results.
An automation, if you activate one: it reads your household, writes its result to your file and notifies you by an email that carries only a link.
The household log: each entry, its date, its subject and who made it. Only the holder reads it.
Your consents and access openings: the action, its date, its author.
Your agent tokens: their hash, never the token, their name and their duration. Each call is recorded: which token, which tool, when, without the content. This log is erased after 13 months, and with your account.
Your message on the Let's talk page, and the contact detail if you give one. A scheduled run counts pending messages and records that count; it does not pass on their content.
Your subscription: the identifiers sent by the payment provider, the payment events. Never your card number.
A PDF document you deposit: it is processed in memory to extract its text. The file is not kept. We record its sha256 fingerprint, its number of pages, the name of the source and the date, with only the values you confirm. This stays as long as the household exists and is deleted with it, and so with your account if it takes the household with it. Nothing is sent to a third party or to an AI service.
Your IP address is used to limit repeated attempts: the application keeps it in memory and does not write it to the database.
You can deposit a read-only key by ticking your authorisation; nothing is deposited without it.
Interactive Brokers: you deposit your Flex token and your query identifier. They go to Interactive Brokers, which sends us your open positions: account, security, value, currency, date.
OKX, Kraken or Binance: you deposit a key, its secret and, for OKX, its passphrase. We first query the key's rights and refuse any key that could place an order or withdraw funds. Our signed reads go to the platform you choose, which sends us your balances per asset.
The key is kept encrypted, its encryption key outside our database, and is never shown again. We also keep each reading and its date, your authorisation and its date.
Reading happens at deposit, then when you ask to refresh your sources. No order, no withdrawal, no funds held or moved.
The holder can authorise a member, for example a professional, to deposit a source for the household: it is linked only after the holder's agreement, and the holder never sees the key.
You can remove a source at any time: the key is erased on our side, reading stops and readings already dated stay in your household. The key remains valid at the broker or platform until you revoke it there.
Stripe, for payment: your address is prefilled there, with a reference to your account. Scaleway, for sending emails: the recipient's address, you or the person you invite, and the content of the message. Resend, only if we switch sending to this fallback service: the same data.
The official directory of communes (Découpage administratif API, a public service of the French State): only the commune name or postal code you enter for a real-estate asset, in order to show a public price benchmark. Never your address, nor any other data.
The broker or platform you choose, only if you deposit a source for it: what the previous section describes.
An external agent, only if you create a token and give your consent: what it reads goes to its publisher, under its terms.
The home page scrolls real events: the time, the type (reading received, subscription opened, subscription renewed) and an 8-character hash. No name, no address, no answer, no amount.
Only those that make the service work: khn_session, your session (1 hour); khn_rafraichir, its renewal (30 days); khn_reauth, the confirmation of a sensitive action (10 minutes); khn_retour_invitation, going back to an invitation (24 hours); khn_langue, your language (1 year).
No advertising cookies, no audience measurement by a third party.
To access or correct your data, write to us from the Let's talk page. Your register can also be exported as a file from your space.
You erase your account from your space: your current password is required and an email confirms the request, without which it is not carried out. It takes effect after 24 hours and can be cancelled until then.
Before that, cancel an active subscription and remove any authorisations still active. If you are the only holder of a household, tick its deletion or first name another holder.
What remains after erasure: an identifier without name or address in the append-only logs, which are not rewritten, the accounting lines of your payments, and backups until their rotation. A household that goes on without you keeps what it contains, including the names of removed assets and tools, for as long as it exists. The customer record at the payment provider is erased separately: write to us from the Let's talk page.
A household that continues without you keeps the fingerprint, the number of pages, the name of the source and the date of the documents deposited, as long as it exists. These lines do not name who deposited. The file itself was never kept.