Privacy Policy

Controller: Yannis Mesquida, sole trader (French micro-enterprise), trading as IgniFI

SIREN: 941 197 626

Address: 74 C rue de Versoix, 01210 Ferney-Voltaire, France

Contact: contact@ignifi.io; to exercise your rights, see section 6.

Depending on the features you use, we process the following categories of data:

• Account: email address, password (stored in hashed form by our authentication provider), sign-in timestamps, language and, if you enable it, two-factor authentication data (TOTP secret, hashes of recovery codes).
• Profile and situation, when you provide them: year of birth, household (single or couple, married or in a civil partnership, number of children), your share of the household budget, tax residence, marginal tax bracket, display currency. They are used for projections, the tax rules applied and the comparison with French households.
• Wealth: accounts and institutions you name, holdings, values, currencies, ownership shares and their history, main-residence flag, debts and amortisation schedules, trades and contributions, dated snapshots of your wealth, goals, spend plan and quick estimates.
• Budget: date, description, amount and category of the transactions you import or enter, your budget targets and your answers to reconciliation questions. A bank description may contain the name of a merchant, employer or person.
• Documents you import: the content of a statement or spreadsheet passes through to be read (see section 5, Google); it is not kept. Only usage counters remain (date, type of import, number of lines).
• Assistant and support: the text of questions asked to the assistant, their language and the outcome of the answer; if you send a conversation to support, the conversation, your message and your email address.
• Billing: Stripe customer and subscription IDs, status, plan and dates; your reason for cancelling if you choose to give one. No card number ever passes through or is stored by IgniFI.
• Proof of acceptance of the terms: version accepted, date and language displayed.
• Request for immediate access before a purchase: the box ticked before payment, with the sentence displayed, the date, the language, the plan bought and the version of the terms.
• Technical data: IP address and browser characteristics, processed by our host, by the anti-bot check and by the audience measurement described in section 5.
• If you used the tax preparation module when it was offered: the transactions and calculations it holds.

We do not collect special categories of data within the meaning of Article 9 GDPR (health, ethnic origin, political opinions, etc.).

• Create and authenticate your account and give you access to your space (contract performance).
• Calculate and display your wealth, goals, estimated financial-independence date, simulations and spend plan (contract performance).
• Track your budget and analyse your spending (contract performance).
• Automatically read the documents you choose to import, and identify their type when you drop them in the assistant (contract performance, at your request).
• Estimate a property's value from public data (contract performance).
• Answer questions asked to the assistant, handle your support requests and improve the help centre (legitimate interest).
• Process subscriptions, handle cancellations and keep accounting records (contract performance; legal obligation for accounting records).
• Send account messages (email confirmation, password reset, deletion confirmation, warnings before an inactive account is deleted) and the monthly report (contract performance; legitimate interest for the report).
• Keep proof of your acceptance of the terms of service (legitimate interest).
• Collect, before a purchase, your request for immediate access to the service, keep proof of it and restate it in the purchase confirmation email (legal obligation, articles L. 221-13 and L. 221-25 of the French Consumer Code; legitimate interest for the proof).
• Measure the site's audience and performance, and ensure its security and continuity (legitimate interest).

Your financial data is never used for advertising, never sold, and never shared with third parties for commercial purposes.

Monthly report. An email summarising your gross wealth, debts, net worth and goals is sent to you each month. It is on by default. You can object at any time, with one click from the link in each report or from the My account page.

Automated decisions. No decision producing legal effects concerning you or similarly significantly affecting you is based solely on automated processing. When a document is read by artificial intelligence, the extracted data is shown to you to validate, correct or discard before anything is saved.

Your data is retained for as long as your account is active. If you delete your account, all your data is permanently deleted within 30 days maximum.

Two proofs kept after deletion. The proof of your acceptance of the terms of service (version, date, language) and, if you made a purchase, the request for immediate access you ticked before paying (the sentence ticked, date, plan, version of the terms, payment session identifier) are kept for five years after their date, including after the account is deleted, solely for the defence of legal claims (legitimate interest; GDPR Article 17(3)(e)). They contain neither your name nor your email address, and are deleted automatically when the five years are up.

Inactive accounts. An account with no paid subscription and no sign-in or change for 36 months is deleted, along with all its data. Three warnings are sent to the account address during the final three months: at 33 months, at 35 months, then 7 days before. Simply signing in keeps everything and resets the clock. An active paid subscription is never affected. This period matches the reference duration used by the CNIL for customer data from the last contact.

Invoices and accounting records relating to a payment are kept separately by our processor Stripe for 10 years, as French commercial law requires. Deleting an IgniFI account does not affect them.

Subscription cancellation. Cancelling a subscription deletes nothing: your account moves to the free plan and your data stays intact. You can download a complete copy at any time from My account > Data export > Download all my data, with no subscription or waiting period. Nothing is erased unless you delete your account, and that export stays available.

Your data is accessible only to the controller and to the following providers, each for the sole purpose stated:

• Supabase Inc. (United States): authentication and database. Your data is hosted in the European Union.
• Vercel Inc. (United States): application hosting. The application's functions run in the European Union (Frankfurt); Vercel's delivery network handles each request, including your IP address and session token, at the point of presence closest to you, and keeps technical logs of it for a limited period. Vercel does not store your account data.
• Vercel Web Analytics and Speed Insights (Vercel Inc., United States): cookieless measurement of audience and loading times (pages viewed, referrer, device and browser type, country). It cannot follow you from one site to another and receives no financial data.
• Stripe Payments Europe, Ltd (Ireland), with Stripe, Inc. (United States): payment for subscriptions and coaching. Receives your email address, customer ID, plan and amounts. No card number ever passes through or is stored by IgniFI.
• Google (Gemini API) (United States): automated reading of the documents you choose to import, and identification of their type when you drop them in the assistant; generation of the assistant's answers from the help centre. The document itself is transmitted — a bank statement contains your transactions, your bank's name and your account number. It is sent to be analysed and is not retained by IgniFI beyond the extraction. The text of questions asked to the assistant is also sent, without your account data. You are never required to use this feature: CSV and Excel imports do not go through it. Finally, when you ask the budget to suggest a category for transactions left in “Other”, only merchant names taken from their labels are sent, without a person's name, an amount, a date, or a card or account number; the answer is kept by IgniFI, with nothing that identifies you, so the same question is not asked twice.
• Resend (United States): email delivery. Receives your address and the message body — the monthly report contains your figures.
• Cloudflare, Inc. (United States): anti-bot check (Turnstile) on the sign-up, sign-in and forgotten-password pages. Receives your IP address and technical characteristics of your browser, never your financial data.
• Calendly LLC (United States): coaching appointment booking, on the booking page available to eligible subscribers. Nothing is requested from Calendly until you click the button that shows the calendar. Only then does Calendly receive your IP address and what you enter to book, and set its own cookies, governed by its privacy policy.
• National Address Base and Administrative Boundaries API (French State public services, api-adresse.data.gouv.fr and geo.api.gouv.fr): in the property estimator, the address or town you type is sent to them directly from your browser to suggest matches; they also receive your IP address. The estimate itself sends data.gouv.fr (DVF records) only a commune code.
• Market data providers (Yahoo Finance, Twelve Data, Stooq, Frankfurter, ExchangeRate-API, goldprice.org): stock prices, exchange rates and the gold price, queried by our servers. They receive only a security code or a currency pair, never any personal data.

Transfers outside the European Union. Where data is transferred to the United States, the transfer relies, depending on the provider, on the European Commission's adequacy decision for the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses. Details per provider are available on request at support@ignifi.io.

Under the GDPR and the French Data Protection Act, you have the following rights:

• Access - obtain a copy of your personal data
• Rectification - correct inaccurate data
• Erasure - delete your account and all your data using the “Delete my account” button on the My account page, or by contacting us, subject only to the two proofs described in section 4
• Portability - receive your data in a structured, machine-readable format. The Download all my data button on the My account page produces that file immediately, free of charge, whatever your plan. You may also request it by email.
• Objection - object to processing based on legitimate interest, including the monthly report
• Restriction - request temporary suspension of a processing activity
• Withdrawal of consent - where processing relies on your consent, withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal
• Post-mortem instructions - set instructions for the retention, erasure and communication of your data after your death (article 85 of the French Data Protection Act)

To exercise these rights, write to support@ignifi.io. We reply within one month.

You also have the right to lodge a complaint with your national data protection authority (e.g. CNIL in France: cnil.fr).

We implement appropriate technical and organisational measures to protect your data: encryption at rest provided by our database host, encryption in transit, secure authentication with optional two-factor authentication, and per-account data isolation enforced by the database.

We use only strictly necessary cookies for authentication (Supabase session tokens), and your browser's local storage for display preferences and drafts. They have no advertising purpose and do not require your prior consent (article 82 of the French Data Protection Act).

Vercel's audience measurement uses no cookie.

The only non-essential tracker on the site is the Calendly calendar's, on the coaching booking page. It is set only if you click the button that loads the calendar, having been told that the click means accepting its cookies. Without that click nothing is loaded from Calendly and you can still book by email. You can delete these cookies at any time from your browser settings (section 5).

We may amend this policy to reflect changes to the service or to the law. In the event of a significant change, we will notify you by email or by a notice in the service. The current version is always available at this address, with the date it was last updated.