Back homeprivacy-v1-2026-05-18

Legal document

Privacy Policy

This policy explains how Riqzz handles account data, financial data, and emails forwarded to the financial inbox when a user authorizes bank imports.

Product
Riqzz
Legal entity
Erick Cruz
Address
Dominican Republic
Privacy contact
privacy@riqzz.com

Data we process

We process account data such as email address, credentials managed by Supabase, language preferences, country, and profile settings.

We also process financial data entered or confirmed by the user in Riqzz, including accounts, cards, balances, budgets, expenses, income, subscriptions, goals, and transactions.

Inbound financial inbox

The financial inbox is optional and requires explicit consent before processing emails. The user forwards bank alerts, receipts, invoices, or financial notifications to an address assigned by Riqzz.

Riqzz does not access the user’s personal mailbox or modify external emails. Received emails are used to prepare expense candidates that the user reviews before saving.

AI use and minimization

When an email cannot be interpreted with deterministic rules, we may send sanitized evidence to an AI provider, currently Groq, to extract data such as amount, currency, date, merchant, bank, and card last four digits.

Before processing, references, links, email addresses, long numbers, and unnecessary data are reduced. We do not use inbox-derived data for advertising, selling data, credit-worthiness decisions, or training general models.

Security, retention, and revocation

Derived email data, allowed attachments, and sensitive financial fields are encrypted where applicable. Attachments are stored in private storage and data access is limited to visible product functionality.

The user can pause or regenerate the inbox. Expenses manually approved by the user remain as user-created financial records.

Rights and applicable framework

Users may request access, correction, update, or deletion of their data under Dominican Republic Law No. 172-13 on Personal Data Protection and other applicable rules.

Riqzz only processes emails sent to the assigned inbox and does not request OAuth access to the user’s personal mailbox for this modality.