Privacy Policy

English Version

1. Introduction

Carmen Contadora ("Carmen," "we," "us," or "our") is a personal financial management service operated by Inventa AI Solutions ("Inventa"), located in Austin, Texas. This Privacy Policy describes how we collect, use, store, share, and protect your personal and financial information when you use our website, mobile application, Telegram bot, or any related services (collectively, the "Service").

By using Carmen, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information: name, email address, password
• Household information: household name, partner invitation
• Financial categories and budgets you create
• Transactions you manually register (description, amount, account, category)
• Savings goals you define
• Preferences: language, notification settings, display preferences

2.2 Information Collected Through Third-Party Services

When you choose to connect your bank accounts through Plaid (United States) or Belvo (Mexico), we receive:

• Account names and types (checking, savings, credit)
• Account balances
• Transaction history (date, amount, merchant name, category)
• Account and routing numbers (for identity verification only)

We do NOT receive or store your bank login credentials. Plaid and Belvo handle authentication directly with your financial institution.

2.3 Information Collected Automatically

• Device information: browser type, operating system
• Usage data: pages visited, features used, time spent
• IP address (for security and audit purposes)
• Session data: authentication tokens, login timestamps

2.4 Information Processed by AI

Carmen uses artificial intelligence (currently OpenAI and Anthropic) to process your messages and provide conversational financial assistance. When you interact with Carmen via text:

• Your message text is sent to the AI provider for processing
• We do NOT send your full financial history, account numbers, or bank credentials to AI providers
• AI providers process your message and return a response; they do not store your data for training purposes (per our data processing agreements)
• Pattern learning data (e.g., "you usually pay Starbucks with AMEX BlueCash") is stored locally in our database, not with AI providers

3. How We Use Your Information

We use your information exclusively to:

• Provide the financial management Service (budgeting, expense tracking, goal tracking)
• Authenticate your identity and secure your account
• Connect to your financial institutions via Plaid/Belvo (only when you initiate)
• Generate personalized financial insights and alerts
• Improve the accuracy of AI-assisted categorization
• Respond to your support requests
• Comply with legal obligations

We do NOT use your information to:

• Sell to third parties
• Target advertising
• Build marketing profiles
• Share with data brokers
• Make credit or lending decisions

4. How We Share Your Information

We do NOT sell your personal information.

We do not share your information except in the following limited circumstances:

5. Data Security

We implement the following security measures to protect your financial data:

• Encryption at rest: Our database is hosted on managed infrastructure with volume-level encryption at rest. Credentials for third-party financial connections (such as Plaid access tokens) are additionally encrypted at the field level using AES-256-GCM before being stored.
• Encryption in transit: All data transmission uses TLS 1.2 or higher
• Passwordless sign-in: You may sign in with a one-time code sent to your email address, so no password needs to be typed or stored by you
• Multi-factor authentication: Time-based one-time password (TOTP) authentication. When enabled on your account, it is required on every sign-in and enforced server-side — it cannot be bypassed by navigating directly to a page.
• Authentication abuse protection: Sign-in and one-time-code requests are rate limited by our authentication provider (Supabase Auth); account-creation requests are additionally rate limited by us
• Row Level Security: Database-level isolation ensures you can only access your household's data
• Access controls: Role-based access within households (admin/member)
• Audit logging: All access to and modifications of financial data are logged
• No credential storage: Bank credentials are handled exclusively by Plaid/Belvo. We never see, receive or store them.
• Regular backups: Encrypted backups with limited retention

Artificial intelligence and your data

Carmen uses third-party large language models (Anthropic and OpenAI) to understand your messages. We want to be precise about what this means:

• We do not train, fine-tune or improve any AI model using your data, and our providers do not train on data submitted through their commercial APIs.
• We do not create vector embeddings or any derived AI index of your financial data.
• What is sent to the model is limited to your message, the names of your household's accounts and categories, and aggregated budget figures. Account numbers, bank credentials and Plaid access tokens are never sent.
• Carmen's "learning" is a simple table of counters that maps a merchant to the account and category you confirmed. It is inspectable, and it is deleted with your account.

6. Data Retention

• Active account data: Retained while your account is active
• Transaction history: Retained while your account is active (you may delete individual transactions at any time)
• Audit logs: Retained for 2 years
• AI conversation history: Rolling 90-day window
• After account deletion: All personal data is permanently deleted within 30 days of your deletion request

7. Your Rights

All users:

• Access your data at any time through the Service
• Correct inaccurate information
• Delete your account and all associated data
• Export your data in standard format (CSV)
• Disconnect bank accounts at any time

California residents (CCPA/CPRA):

• Right to know what personal information we collect and why
• Right to delete your personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights
• Right to limit use of sensitive personal information

Texas residents (TDPSA):

• Right to confirm whether we process your data
• Right to access, correct, and delete your data
• Right to data portability
• Right to opt out of targeted advertising (we do not engage in targeted advertising)

Mexican residents (LFPDPPP — see Section 11 for Aviso de Privacidad):

• ARCO rights: Access, Rectification, Cancellation, and Opposition
• Right to withdraw consent at any time

8. Children's Privacy

Carmen is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect.

10. Contact Us

For privacy inquiries, data access requests, or complaints:

For CCPA-specific requests: privacy@inventasolutions.ai (subject line: "CCPA Request")

11. Aviso de Privacidad (LFPDPPP — México)

De conformidad con la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), Inventa AI Solutions ("Inventa"), con domicilio en Austin, Texas, Estados Unidos, es responsable del tratamiento de sus datos personales.

11.1 Datos Personales que Recabamos

Recabamos los siguientes datos personales:

• Datos de identificación: nombre, correo electrónico
• Datos patrimoniales y financieros: transacciones, saldos de cuentas, presupuestos, metas de ahorro
• Datos de contacto: correo electrónico

Los datos financieros son considerados datos personales que requieren consentimiento expreso conforme al artículo 8 de la LFPDPPP.

11.2 Finalidades del Tratamiento

Finalidades primarias (necesarias para el servicio):

• Proporcionar el servicio de gestión financiera personal
• Autenticar su identidad y proteger su cuenta
• Conectar sus cuentas bancarias a través de Plaid o Belvo
• Generar alertas y recomendaciones financieras personalizadas

Finalidades secundarias:

• Mejorar la precisión del sistema de categorización por inteligencia artificial
• Enviar reportes financieros periódicos

Si usted no desea que sus datos sean tratados para finalidades secundarias, puede manifestarlo enviando un correo a privacy@inventasolutions.ai.

11.3 Transferencia de Datos

Sus datos personales pueden ser transferidos a:

• Plaid Inc. (Estados Unidos): para acceder a datos de cuentas bancarias estadounidenses
• Belvo (México/LATAM): para acceder a datos de cuentas bancarias mexicanas
• Proveedores de inteligencia artificial (OpenAI, Anthropic): únicamente el texto de sus mensajes para procesamiento conversacional. No se transfieren números de cuenta ni saldos.

Al tratarse de una transferencia internacional de datos (de México a Estados Unidos), usted consiente expresamente dicha transferencia al aceptar este Aviso de Privacidad, de conformidad con el artículo 36 de la LFPDPPP.

11.4 Derechos ARCO

Usted tiene derecho a:

• Acceder a sus datos personales en nuestro poder
• Rectificar datos inexactos o incompletos
• Cancelar el tratamiento de sus datos (eliminación)
• Oponerse al tratamiento de sus datos para finalidades específicas

Para ejercer sus derechos ARCO, envíe una solicitud a: privacy@inventasolutions.ai

Su solicitud será atendida en un plazo máximo de 20 días hábiles.

11.5 Revocación del Consentimiento

Usted puede revocar su consentimiento para el tratamiento de datos en cualquier momento, enviando su solicitud a privacy@inventasolutions.ai. La revocación no tendrá efectos retroactivos.

11.6 Modificaciones al Aviso de Privacidad

Nos reservamos el derecho de modificar este Aviso de Privacidad. Cualquier modificación será notificada a través de nuestro servicio con al menos 30 días de anticipación.

11.7 Consentimiento

Al utilizar Carmen Contadora, usted manifiesta su consentimiento expreso para el tratamiento de sus datos personales, incluidos los datos financieros, conforme a los términos de este Aviso de Privacidad.