Privacy policy
Last updated: 1ᵉʳ août 2026
Sellay Finance places great importance on protecting your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is the site publisher, indicated in the legal notice. For any question about your data, contact: contact@sellay.app.
2. Data we collect
- Account data: username, email address, and — if you sign in with Google — the display name and profile picture provided by Google.
- Financial data you enter: income, expenses, categories, household members, savings goals, contracts, starting balances and settings. This data remains strictly personal and confined to your account.
- Subscription data: status, plan and billing identifiers managed via Stripe (we never store your card numbers).
- AI coach usage data: the messages you send to the coach and a daily usage counter (for quota management).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide the service (account, budget tracking, goals) | Performance of the contract |
| Manage your subscription and billing | Performance of the contract |
| Provide AI coach advice | Performance of the contract |
| Ensure security and prevent fraud | Legitimate interest |
| Respond to your support requests | Legitimate interest |
| Comply with our accounting and legal obligations | Legal obligation |
4. Recipients and processors
Your data is never sold. It is processed by technical providers (processors within the meaning of the GDPR), strictly to run the service:
| Provider | Role | Location |
|---|---|---|
| Vercel | Application hosting | United States / EU |
| Prisma Data Platform (Prisma Postgres) | Database | European Union (Frankfurt) |
| Stripe | Payment and subscription management | United States / EU (PCI-DSS certified) |
| Groq | AI model provider for the coach | United States |
| Authentication (“Sign in with Google”) | United States / EU |
AI coach and transfers outside the European Union
When you use the AI coach, a summary of your financial situation and your messages are sent to Groq (a company established in the United States) to generate a response. This transfer outside the EU is governed by the appropriate safeguards provided for by the GDPR (standard contractual clauses). If you do not want this data processed by a third party, do not use the AI coach feature.
5. Retention period
- Account and financial data: kept as long as your account is active. It is deleted when you delete your account.
- Billing data: kept for the period required by our accounting and tax obligations (generally 10 years).
- Coach messages: kept as long as necessary to run the service, then deleted with the account.
6. Your rights
In accordance with the GDPR, you have the following rights:
- Access and portability: you can export all of your data at any time from the Settings page (JSON and CSV formats).
- Rectification: you can correct your data directly in the app.
- Erasure: you can delete your account and all associated data.
- Objection and restriction: you can object to certain processing based on legitimate interest.
To exercise these rights, use the tools built into the app or write to us at contact@sellay.app. You may also lodge a complaint with your national data protection authority.
7. Cookies
Sellay Finance uses only one strictly necessary cookie for the service to work: a session cookie that keeps you signed in. This cookie is exempt from prior consent because it is essential to providing the service you request. We do not use advertising cookies or audience-measurement trackers.
8. Security
Passwords are stored in encrypted form (never in plain text), exchanges are encrypted over HTTPS, and each account is isolated: no user can access another user’s data. We implement reasonable technical and organisational measures to protect your data.
9. Changes
This policy may be updated. In the event of a substantial change, we will inform you by an appropriate means. The last-updated date appears at the top of this page.