1. Identity of the Data Controller
In accordance with the provisions of Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and applicable Spanish regulations, the following information regarding the data controller is provided:
- Owner: Víctor Latorre
- Tax ID (NIF): 49099283-X
- Country: Spain
- Contact Email: info@valqash.com
- Trade Name: Valqash
- Web Domain: https://valqash.com
2. Description of the Service
Valqash is a personal finance web application (SaaS) that allows users to manually record and manage their financial information for personal control, analysis, and savings purposes.
The service:
- Does not connect to banks or financial institutions.
- Does not execute payments, transfers, or real orders.
- Does not collect real banking data.
- Is intended exclusively for personal or couple use, not professional use.
- Is limited to persons over 18 years of age.
3. Personal Data Processed
3.1. Data provided by the user
Valqash only processes the data necessary to provide the service:
- Identifying data:
- Email address
- Name or alias
- Access credentials:
- Password, managed exclusively by an external authentication provider (Firebase Authentication).
- The owner does not have direct access to passwords.
- Financial data manually entered by the user:
- Account names
- Categories
- Transaction amounts
- Customized financial information defined by the user
This data does not come from third parties or financial entities and is not cross-referenced with external sources.
3.2. Technical data
- IP Address
- Technical and security logs
4. Purposes of Processing
Personal data is processed for the following purposes:
- To allow user registration and authentication.
- To provide the personal finance management and visualization service.
- To offer analysis and recommendations aimed at expense control and savings.
- To guarantee the security and correct functioning of the platform.
- To manage inquiries and support requests.
- In case of voluntary subscription, to send informative communications via the newsletter.
In no case is the data used for:
- Professional financial advice.
- Investment advice.
- Automated decision-making with legal or significant effects.
5. Legal Basis for Processing
The legal bases that legitimize the processing of data are:
- Performance of a contract: to provide the service requested by the user.
- Consent of the data subject: for sending the newsletter and using analytical cookies.
- Legitimate interest: to ensure technical security and prevent misuse of the platform.
6. Financial Recommendations and Analysis
Valqash may offer personalized recommendations based on the data entered by the user. These recommendations:
- Are purely for informational and illustrative purposes.
- Are limited to the analysis of spending and saving habits.
- Do not constitute financial or professional advice.
The user is solely responsible for the decisions they make based on the information shown by the platform.
Users are advised not to enter data that reveals ideology, trade union membership, religion, beliefs, health, or sexual life, as Valqash does not request or require the processing of special categories of data.
7. Information Sharing (Couples' Finances)
The service allows financial information to be shared between two or more users, provided there is an express invitation and acceptance.
In shared spaces:
- All users can view and modify the data.
- The owner does not intervene or mediate in conflicts between users.
- The user is responsible for sharing only the information they deem appropriate.
8. Data Retention
Personal data will be kept as long as:
- The user keeps their account active.
- Deletion is not requested.
- There is a legal obligation that justifies its conservation.
Once account deletion is requested, the data will be deleted in accordance with applicable regulations.
9. Account and Data Deletion
Currently, the deletion of the account and associated data must be requested by email to info@valqash.com.
The procedure may be modified in the future, for example, by allowing direct deletion from the application.
10. Recipients and External Providers
To provide the service, Valqash relies on the following categories of providers, which act as data processors. The current provider is shown in brackets:
- Website hosting: servers located in the European Union (Vercel).
- User authentication for the application, including verification and password recovery emails (Google Firebase Authentication).
- Analytics for the website and the application, subject to your consent (Google Analytics).
- Protection against spam and automated use of the forms, subject to your consent (Google reCAPTCHA).
- Newsletter delivery (Mailerlite).
- Corporate email, through which enquiries and data protection requests are handled (Hostinger).
The application, its API, form processing and the internal handling of requests run on Valqash's own infrastructure, with no third parties involved.
All these providers have been selected because they offer adequate data protection guarantees, and their processing is governed by the corresponding data processing agreements.
11. International Data Transfers
Some of the providers above (Google and Vercel) are based in the United States, or may process data from there, which implies an international data transfer. Mailerlite is based in the European Union but may use sub-processors located outside it.
These transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the standard contractual clauses approved by the European Commission.
12. Cookies
Valqash uses:
- Technical cookies necessary for the operation of the site.
- Analytical cookies (Google Analytics).
- Technologies associated with Google reCAPTCHA.
No first-party advertising cookies are used. The use of cookies is managed in accordance with the corresponding cookie policy.
13. Newsletter
Subscription to the newsletter is optional and separate from registration in the application.
- Currently, it is only offered from the landing page.
- In the future, an optional consent may be included during registration.
- The user can unsubscribe at any time.
14. User Rights
The user may exercise the following rights at any time:
- Access
- Rectification
- Erasure (Deletion)
- Restriction of processing
- Objection
- Data portability
To exercise these rights, you can contact us via email at info@valqash.com, indicating the right you wish to exercise.
Likewise, the user may file a complaint with the Spanish Data Protection Agency (AEPD) if they consider that their rights have been violated.
15. Data Security
The owner applies appropriate technical and organizational measures to protect personal data and prevent its loss, unauthorized access, or misuse.
However, the user should be aware that no digital platform is completely invulnerable.
16. Modifications to the Privacy Policy
The owner reserves the right to modify this Privacy Policy to adapt it to legislative, technical, or functional changes in the service.
Modifications will be published on the website and will be effective from the time of publication.