Privacy policy

Last updated: October 2026

This is an English translation provided for convenience. The Spanish version is the legally binding one and prevails in case of any discrepancy.

1. Data controller

Farwise. Contact for any privacy matter: [email protected].

2. What data we process

• Account: name, email, a hash of your password (never the password itself), the secret for two-step verification if you turn it on (encrypted), your profile picture if you upload one, sign-up date and last access.
• What you record: investment trades, transactions, accounts, budgets, goals, notes, watched stocks and settings.
• Integrations you turn on: the Interactive Brokers query token (encrypted), your Trade Republic phone number (the PIN is not stored), the Telegram token and chat (encrypted), and the access you grant to AI assistants (MCP).
• Security and technical: open sessions (browser and date), your account’s activity log, usage of connected assistants (which tool and when, without the content of the questions) and technical server logs.

We do not process special categories of data or build profiles for commercial purposes.

3. Purposes and legal basis

• Providing the service you sign up for (art. 6.1.b GDPR): storing your data and calculating your metrics.
• Security and abuse prevention (legitimate interest, art. 6.1.f): attempt limits, session logging, anti-bot check at sign-up and usage limits.
• Service emails (art. 6.1.b): verification, security alerts and password reset. We do not send advertising.
• Optional features you turn on yourself (AI categorisation, Telegram, brokers, assistants): only when you turn them on, and you can turn them off at any time.

4. Who it is shared with (processors)

We do not sell or transfer your data. To operate we use these providers, which only process what is necessary:

• Hosting: our own server located in Spain (EU). It holds the database and its backups; no external hosting provider is involved.
• Internet access (Cloudflare, Inc., USA): network tunnel (Cloudflare Tunnel) through which traffic reaches our server. All traffic between your browser and Farwise goes through its network, which processes your IP address and the content of requests in transit only to route them. International transfer covered by the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.
• Market data: Farwise’s own market data service, which queries public and third-party sources. It only receives stock symbols (for example “AAPL”), never your personal data.
• Company logos: stock logos are served by Farwise from its own server. Our market data service fetches them once per symbol (for example “AAPL”) from the image server of Financial Modeling Prep (USA) and stores them; your browser does not connect to that third party. It only receives the symbol, without your IP address or anything linking it to you.
• Artificial intelligence (Anthropic PBC, USA): only if you use AI categorisation or Warren, the assistant. Categorisation receives merchant names and example descriptions with IBANs, cards, emails and long numbers redacted before they leave, an amount range (not the amount) and the month. Warren receives your questions and whatever it looks up in your data to answer them (portfolio figures, transactions, taxes), always without IBANs, account numbers, emails or personal notes. International transfer covered by the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.
• Email (SMTP): Resend, Inc. (EE. UU.). It receives your email address and the content of service emails.
• Sign-in with Google: only if you use it. The provider confirms your verified email and your name to us; we do not send them anything of yours.
• Services you connect yourself (Telegram, Interactive Brokers, Trade Republic, the AI assistant you authorise): they receive or provide what is needed for the integration you turn on, under your account with them.

5. How long

• Your data, for as long as you have the account. When you delete it, it is removed from the database instantly.
• Backups: full copies of the database kept for 14 days. So after you delete your account, your data may remain in those copies for up to 14 days, until they rotate; they are only used to restore the service after a disaster.
• Unverified sign-ups: deleted after 7 days.
• Closed or expired sessions: 90 days. Activity log: 730 days. Usage of connected assistants: 90 days.
• Technical server logs (IP addresses, requested paths, errors): 30 days.

6. Your rights

You can access your data, rectify it, erase it, take it with you (portability), object to its processing or ask for it to be restricted. You can do the most common things yourself from the app:

• Download everything (access and portability): Settings → My account → download my data (JSON).
• Delete the account (erasure): Settings → My account. Deletion is immediate and takes everything associated with it.
• Rectify: by editing the data directly in the app.

For anything else, write to [email protected]. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

7. Security

Encrypted connection (HTTPS), passwords hashed with bcrypt, integration secrets encrypted (AES-256-GCM), optional two-step verification, sessions you can revoke one by one and strict isolation between accounts.

Whoever administers Farwise only sees in your account’s activity log the type of change, the date and who made it: never the amount, description, counterparty or notes of your transactions or trades. To resolve incidents they do see the technical error messages of your failed imports and syncs.

8. Cookies

We only use strictly necessary technical cookies. Details in the cookie policy.

9. Minors

The service is not intended for people under 18.