Legal document
Privacy Policy
This policy explains how Riqzz handles account data, financial data, and emails forwarded to the financial inbox when a user authorizes bank imports.
- Product
- Riqzz
- Legal entity
- Erick Cruz
- Address
- Dominican Republic
- Privacy contact
- privacy@riqzz.com
Data we process
We process account data such as email address, credentials managed by Supabase, language preferences, country, and profile settings.
We also process financial data entered or confirmed by the user in Riqzz, including accounts, cards, balances, budgets, expenses, income, subscriptions, goals, and transactions.
Inbound financial inbox
The financial inbox is optional and requires explicit consent before processing emails. The user forwards bank alerts, receipts, invoices, or financial notifications to an address assigned by Riqzz.
Riqzz does not access the user’s personal mailbox or modify external emails. Received emails are used to prepare expense candidates that the user reviews before saving.
AI use and minimization
When an email cannot be interpreted with deterministic rules, we may send sanitized evidence to an AI provider, currently Groq, to extract data such as amount, currency, date, merchant, bank, and card last four digits.
Before processing, references, links, email addresses, long numbers, and unnecessary data are reduced. We do not use inbox-derived data for advertising, selling data, credit-worthiness decisions, or training general models.
Security, retention, and revocation
Derived email data, allowed attachments, and sensitive financial fields are encrypted where applicable. Attachments are stored in private storage and data access is limited to visible product functionality.
The user can pause or regenerate the inbox. Expenses manually approved by the user remain as user-created financial records.
Rights and applicable framework
Users may request access, correction, update, or deletion of their data under Dominican Republic Law No. 172-13 on Personal Data Protection and other applicable rules.
Riqzz only processes emails sent to the assigned inbox and does not request OAuth access to the user’s personal mailbox for this modality.