Privacy Policy
This Privacy Policy explains how Previly collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act.
1. Data Collected
Previly collects the following data:
Identification Data
- Name and surname
- Email address
- Password (hashed and secured)
Financial Data
- Bank statements (PDF, images)
- Extracted banking transactions
- Bank account information
- Categorizations and budgets
- Conversations with the chatbot (questions and answers about your finances)
Technical Data
- IP address
- Browser type
- Connection data
- Cookies (see our Cookie Policy page)
2. Processing Purposes
Your data is processed for the following purposes:
- Provide Previly services (AI-powered OCR extraction, analysis, visualization)
- Provide intelligent chatbot service to answer your financial questions
- Manage your user account
- Improve our services
- Contact you regarding your account or our services
- Comply with legal obligations
- Ensure security and prevent fraud
3. Legal Basis for Processing
The processing of your personal data is based on:
- Your consent: for the use of non-essential cookies and for OCR and chatbot services requiring data transfer to Anthropic
- Contract performance: to provide subscribed services
- Legitimate interest: to improve our services and ensure security
- Legal obligation: to comply with accounting and tax obligations
4. Data Retention
Your personal data is retained only for the duration necessary for the purposes for which it was collected:
- Account data: for the duration of your account, then 3 years after closure
- Financial data: for the duration of your account, then 5 years for legal obligations
- Connection data: maximum 12 months
- Account deletion: for technical reasons, a copy of our database as well as uploaded files are retained for a retention period of 1 month after the deletion of your account. Your data will be permanently deleted at the end of this retention period
5. Data Sharing
Previly does not sell your personal data. Your data may be shared only with:
- Technical providers: hosting, cloud services necessary for service operation
- Anthropic: for OCR and chatbot services (see detailed section below)
- Legal authorities: in case of legal obligation or court request
All our providers are subject to strict confidentiality and security obligations.
5.1. Data Processing by Anthropic
Previly uses artificial intelligence services from the American company Anthropic, specifically its Claude model, to provide certain services:
Services concerned
- OCR extraction: automatic extraction of data from your bank statements and invoices (PDF, images)
- Intelligent chatbot: conversational assistant to answer your questions about your finances
Data transmitted to Anthropic
By using these services, you agree that the following data may be transmitted to Anthropic:
- Images of bank statements or invoices
- Banking transactions
- Budgets and expenses
- Patrimony and accounts
- Any other financial information you share in the conversation with the chatbot
Use of data by Anthropic
Anthropic may use your data to improve its services and train its artificial intelligence models, unless you choose to opt out through your Anthropic account settings.
For more information on data processing by Anthropic, consult their privacy policy: https://www.anthropic.com/legal/privacy
Data transfer outside the European Union
Anthropic is an American company. By using OCR and chatbot services, you acknowledge that your data will be transferred and processed in the United States, where data protection laws may differ from those of the European Union.
Consent
Use of OCR and chatbot services requires your explicit consent. You can withdraw your consent at any time by ceasing to use these services. However, data already transmitted to Anthropic cannot be recovered.
To withdraw your consent, contact us at: contact@previly.com
Anthropic Policies
By using these services, you also agree to comply with Anthropic's terms of use:
- Anthropic Privacy Policy: https://www.anthropic.com/legal/privacy
- Anthropic Consumer Terms of Use: https://www.anthropic.com/legal/consumer-terms
- Anthropic Acceptable Use Policy: https://www.anthropic.com/legal/aup
6. Data Security
Previly implements appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Restricted access to data (strong authentication)
- Monitoring and intrusion detection
- Regular and secure backups
7. Your Rights
In accordance with GDPR, you have the following rights:
Droit d'accès
Right of access: You can obtain a copy of your personal data.
Droit de rectification
Right to rectification: You can correct inaccurate or incomplete data.
Droit à l'effacement
Right to erasure: You can request deletion of your data in certain cases.
Droit à la limitation
Right to limitation: You can request limitation of processing of your data.
Droit à la portabilité
Right to portability: You can retrieve your data in a structured format.
Droit d'opposition
Right to object: You can object to processing of your data for legitimate reasons.
Droit de retrait du consentement
Right to withdraw consent: You can withdraw your consent at any time for processing based on consent.
To exercise these rights, contact us at: contact@previly.com
8. International Transfers
Your data is primarily stored and processed within the European Union. However, when you use OCR and chatbot services, your data is transferred to the United States to Anthropic.
In case of transfer outside the EU, Previly ensures that appropriate safeguards are in place in accordance with GDPR. For transfers to Anthropic, the transfer is based on your explicit consent and contractual guarantees provided by Anthropic.
For more information on transfers to Anthropic, see section 5.1 above.
9. Modifications
This Privacy Policy may be modified at any time. We will inform you of any significant changes by email or via a notification on the website.
10. Complaint
If you believe your rights are not being respected, you can file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
CNIL 3 Place de Fontenoy - TSA 80715 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22
11. Contact
For any questions regarding this Privacy Policy or your personal data, contact us at: contact@previly.com