When you create a crivolenthos account, we collect basic identification details including your full name, email address, and phone number. We also require a secure password that you create according to our security guidelines. For verification purposes, we may collect date of birth and postal address information.

Your personal and financial information enables us to provide personalized budgeting insights, track spending patterns, and deliver customized recommendations. We analyze your transaction data to categorize expenses, identify trends, and help you achieve your financial goals through our platform's budgeting tools.

• Creating and maintaining your secure user account
• Processing and categorizing your financial transactions
• Generating personalized budget recommendations and insights
• Providing spending alerts and goal progress notifications
• Delivering customer support and technical assistance
• Sending important account and security-related communications
• Improving our platform's functionality and user experience

We continuously monitor account activity for suspicious patterns that might indicate unauthorized access or fraudulent activity. This includes analyzing login patterns, unusual transaction categorizations, and other behavioral indicators that help protect your account security.

crivolenthos operates with a strict principle of minimal data sharing. We never sell your personal information to third parties for marketing purposes. However, certain trusted service providers help us deliver our services effectively while maintaining the same high standards of data protection.

• Cloud hosting providers who maintain our secure servers and ensure platform availability
• Payment processing services for handling subscription payments and billing operations
• Email service providers for delivering account notifications and important communications
• Security monitoring services that help protect against cyber threats and unauthorized access
• Customer support platforms that help our team assist you effectively

Each third-party provider signs comprehensive data processing agreements that legally bind them to protect your information according to UK data protection standards. We regularly audit these relationships to ensure compliance.

In certain circumstances, we may be legally required to disclose personal information to government authorities, law enforcement agencies, or regulatory bodies. This only occurs when we receive valid legal requests such as court orders, warrants, or regulatory inquiries that we cannot legally refuse.

To exercise any of these rights, contact us using the information provided at the end of this policy. We'll respond to your request within 30 days and verify your identity before processing requests that involve accessing or modifying personal information.

Protecting your financial information is our highest priority. We've implemented multiple layers of security controls designed to prevent unauthorized access, data breaches, and other security incidents.

• Multi-factor authentication for all user accounts
• Regular security vulnerability assessments and penetration testing
• Automated monitoring systems that detect suspicious activity
• Secure API connections with banking institutions and financial data providers
• Regular security updates and patches for all systems and software
• Restricted access controls limiting employee access to customer data
• Comprehensive backup systems with encrypted storage

Our team receives regular security training and follows strict protocols for handling personal information. We conduct background checks on all employees with access to customer data and maintain detailed audit logs of all data access and modifications.

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention requirements based on their purpose and regulatory requirements.

crivolenthos primarily processes and stores data within the United Kingdom. However, some of our trusted service providers operate servers in other countries with adequate data protection standards. When we transfer personal data internationally, we ensure appropriate safeguards are in place.

All international transfers comply with UK data protection requirements and include contractual protections that ensure your data receives the same level of protection regardless of location.

Our platform uses cookies and similar technologies to enhance your user experience, remember your preferences, and provide security features. We use both essential cookies required for basic functionality and optional cookies that improve service quality.

• Essential cookies for login authentication and security
• Preference cookies that remember your dashboard settings
• Analytics cookies to understand how you use our platform
• Security cookies that help protect against fraud and unauthorized access

You can manage cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

We review and update this privacy policy annually, or more frequently when significant changes occur to our data processing practices or legal requirements. When we make material changes, we'll notify active users via email and provide at least 30 days' notice before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

This privacy policy was last reviewed and approved by our Data Protection Officer on 15th January 2025.