ARGENTUS

Privacy Policy

Last updated October 30, 2026

Argentus is operated by JUMO LABS, a SASU registered in France (SIREN: 995 326 949) ("we", "our", "us"). We are the data controller for the personal data processed through Argentus. Financial data is sensitive, and this Privacy Policy explains what we collect, why, who we share it with, and the rights you have over it.

1. Data We Collect

1.1 Account Information

When you create an account, we collect:

  • Your email address
  • Your password, stored only as a secure hash by our authentication provider
  • If you sign in with Google, your name, email address, and profile picture from your Google account
  • A unique user identifier for your account

1.2 Bank Account Data (With Your Authorisation)

When you connect a bank through our open banking provider, GoCardless, we receive:

  • Account details: Account name, holder name, IBAN or account number, currency, and the name of your bank
  • Balances: Current and available balances
  • Transactions: Date, amount, currency, description, counterparty name, and related reference information

We never receive or store your online banking credentials, and our access is read-only.

1.3 Data You Enter

We store the information you add yourself, including:

  • Manual accounts and transactions
  • Categories, transfers, notes, and edits to imported transactions
  • Budgets and forecast settings
  • Investment holdings and trades

1.4 Usage Data

We collect limited technical information to run and improve the Service:

  • Page views and basic device information (browser, operating system, country) through Vercel Web Analytics, which does not use cookies
  • Server logs, including IP address, request details, and errors, used for security and debugging

2. How We Use Your Data

We use your data to:

  • Provide the Service: Import and display your accounts, balances, and transactions; categorise spending; calculate budgets, net worth, investment performance, and forecasts
  • Secure the Service: Authenticate you, prevent fraud and abuse, and protect your account
  • Communicate with you: Send account emails such as sign-up confirmation and password resets, and respond to your requests
  • Improve the Service: Understand how features are used and fix errors
  • Comply with the law: Meet our legal and regulatory obligations

We do not use your data for advertising, and we do not sell it.

3. Legal Bases (GDPR)

We process your personal data on the following legal bases:

  • Performance of a contract: To provide the Service you signed up for, including importing and analysing your financial data
  • Consent: To connect your bank accounts. You can withdraw consent at any time by removing the connection
  • Legitimate interests: To secure, maintain, and improve the Service, as long as these interests are not overridden by your rights
  • Legal obligation: Where we must keep or disclose data by law

Transaction data can sometimes reveal sensitive information, such as payments to a health provider or a political party. We only process it to show you your own finances and never use it to profile you.

4. Who We Share Data With

4.1 Service Providers

We share data only with providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:

  • Supabase: Authentication and database hosting
  • Google: Sign-In (if you choose it) and hosting of our API on Google Cloud
  • GoCardless Bank Account Data: Open banking connections to your bank
  • Vercel: Hosting of the web application and privacy-friendly analytics
  • Twelve Data, Coinbase, and Frankfurter: Market prices and exchange rates. We only send them ticker symbols, currencies, and dates, never your personal data or holdings

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal or financial data.

4.3 Other Disclosures

We may disclose your data only:

  • With your consent
  • To comply with the law, a court order, or a request from a public authority
  • To protect the rights, property, or safety of Argentus, our users, or others
  • In a business transfer, such as a merger or acquisition, in which case we will notify you

5. International Transfers

Some of our providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised by the European Commission, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

6. Data Security

We protect your data with industry-standard measures, including:

  • Encrypted connections (HTTPS/TLS) for all traffic
  • Encryption at rest in our database
  • Row-level access controls so each user can only access their own data
  • Read-only bank connections through a regulated provider

No system is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities as required by law.

7. Data Retention

We keep your data as follows:

  • Account, bank, and financial data: Until you delete your account
  • Bank connections: Until you remove them, or until your bank authorisation expires
  • Server logs: Up to 90 days
  • Backups: Up to 30 days after deletion

We may keep some data longer where the law requires it.

8. Your Rights

Under the GDPR and French data protection law, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data and delete your account
  • Restrict or object to certain processing
  • Data portability: Receive your data in a structured, machine-readable format
  • Withdraw consent at any time, for example by removing a bank connection
  • Set instructions for what happens to your data after your death

To exercise any of these rights, email us at argentus@jumolabs.com. We respond within one month.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority in your country of residence.

9. Cookies and Local Storage

We only use cookies and browser storage that are necessary for the Service or that store your preferences:

  • Authentication cookies: Keep you signed in
  • Preference cookies and local storage: Remember settings such as your theme, whether balances are hidden, and forecast scenarios

We do not use advertising or third-party tracking cookies, so we do not ask for cookie consent.

10. Children

Argentus is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or with a notice in the Service, and update the "Last updated" date above.

12. Contact Us

If you have questions or requests about this Privacy Policy or your data:

  • Service: Argentus
  • Legal Entity: JUMO LABS (SASU)
  • SIREN: 995 326 949
  • SIRET: 995 326 949 00014
  • Email: argentus@jumolabs.com

Read our Terms of Service for the rules that apply to using Argentus.