Privacy Policy

1. Data Controller

GreatBudget is operated by GREATCODE SRL, a company registered in Romania under CUI RO43653070 and registry number J2021000249059, with registered address at Str. Onestilor 25B, Bl. T1, Et. 3, Ap. 304, Cod 410232, Romania.

For all data protection enquiries, contact us at contact@greatcode.ro.

2. Data We Collect

We collect the following personal data when you use GreatBudget:

• Account information: your email address and account credentials.
• Financial data: budget categories, transaction records, and amounts you enter or import.
• Bank connection tokens: short-lived access credentials issued by your bank through a regulated open-banking interface, used solely to retrieve your transaction history.
• Usage data: basic server logs (IP address, timestamp) retained for security purposes.

We do not collect payment card numbers or sell your data to third parties.

3. How We Use Your Data

We use your data exclusively to:

• Operate and maintain your GreatBudget account.
• Sync transactions from your connected bank accounts.
• Generate spending reports and budget summaries for you.
• Send account-related communications (e.g. security alerts).

The legal basis for processing is the performance of the contract between you and GREATCODE SRL (Art. 6(1)(b) GDPR) and, where applicable, our legitimate interests in keeping the service secure (Art. 6(1)(f) GDPR).

4. Third-Party Services

To provide bank connectivity, we use a regulated open-banking infrastructure provider authorised under the EU PSD2 directive. This provider acts as a data processor on our behalf and is contractually bound to protect your data. Your bank credentials are never shared with or stored by GreatBudget — authorisation takes place directly between you and your bank.

We do not use advertising networks, analytics platforms that track users across sites, or any other third-party data brokers.

5. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, all associated personal data is removed within 30 days, except where retention is required by law (e.g. accounting records).

6. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectify inaccurate data (Art. 16).
• Erase your data ("right to be forgotten") (Art. 17).
• Restrict processing in certain circumstances (Art. 18).
• Data portability — receive your data in a machine-readable format (Art. 20).
• Object to processing based on legitimate interests (Art. 21).

To exercise any of these rights, email contact@greatcode.ro. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at www.dataprotection.ro.

7. Security

We use industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, and access controls on our infrastructure. No system is completely secure; if you suspect unauthorised access to your account, contact us immediately at contact@greatcode.ro.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of GreatBudget after changes are posted constitutes your acceptance of the updated policy.

9. Contact

GREATCODE SRL
Str. Onestilor 25B, Bl. T1, Et. 3, Ap. 304, Cod 410232, Romania
contact@greatcode.ro