Privacy policy

Last updated October 1, 2026.

What LibreBudget processes

Each hosted account is independent. The hosted beta stores your Supabase authentication identity, access entitlement, authorization metadata, and an encrypted Powens user token. An onboarding completion flag is stored in your authentication metadata until account deletion; it contains no question, tool arguments, or banking data. LibreBudget does not store bank balances, transactions, account histories, or banking passwords. Powens synchronizes and retains banking data under its own service terms.

Monthly counts of authenticated MCP requests and tool executions are retained per user until account deletion. Restricted administrators can view these counts, registered identities, current OAuth authorization counts and live bank-connection counts for service operation. These counters contain no tool names, arguments, results, prompts, tokens, IP addresses or banking data.

An admission slot linked to your identity enforces the 15-user beta limit and is retained until identity deletion. During a bank addition, temporary authorization metadata includes existing connection identifiers so the connection limit can be enforced without removing previous connections.

Why and for how long

These records are processed to provide the service, secure access, and honour your bank consent. Connections are retained until you disconnect them, their consent expires, or your account is deleted. Expired authorization states are deleted routinely.

To limit duplicate bank synchronization requests, the service stores your user ID, a hashed connection key and a retry timestamp. Expired cooldown records are removed on later refresh reservations for your account; account deletion removes them all. No banking payload or credentials are stored in these records.

Service providers

Data may be processed by Supabase for authentication and metadata storage, IONOS for hosting and email delivery, Powens and your bank for Open Banking access, and the MCP or AI client you explicitly authorize.

Bank logos are fetched by our server from Powens using public institution identifiers and cached in memory, with a refresh on use after 24 hours. These image requests contain no banking credentials or account data, and your browser loads the images from LibreBudget.

Your choices and rights

You can disconnect a bank or revoke an MCP client's access. You may request access, correction, deletion, restriction, portability, or object to processing by contacting contact@lyro.fr. You may also contact your competent data-protection authority.

Security and transfers

The Powens user token is encrypted at rest and financial data is processed in memory. Each processor's region and transfer safeguards are governed by its agreement with the service operator.