Version 2026-10-05
This policy explains how Nuvio (Costa Rica), the data controller, processes personal data of Contadito users under Costa Rica’s Law 8968 on personal data protection and its regulation. This English text is a courtesy translation; the Spanish version prevails.
Account: email and password (stored hashed by our authentication provider).
Financial data you enter or import: accounts (alias, IBAN, BAC account, balance), transactions, categories, income, recurring expenses, budgets, savings goals, debts, wishlists and rules.
The minimum technical data needed to operate and protect the Service (for example access logs). We use no tracking cookies or advertising analytics.
To provide the Service (performance of the contract and your informed, express and free consent), to keep it secure and prevent abuse (legitimate interest), and to meet legal obligations.
We do not sell your data or use it for advertising or commercial profiling.
Cloud infrastructure providers (authentication, database and hosting), located in the United States, process data on our behalf as processors under agreements requiring confidentiality and security.
Anthropic receives a summary of your spending only if you choose to use AI analysis with your own key; in that case Anthropic acts under its relationship with you.
Exchange rates come from an external provider that is only asked for a date and a currency; it never receives any of your data.
Fonts are loaded from Google Fonts, which means your IP address reaches Google when you visit the site.
Your data is stored and processed outside Costa Rica (United States). You consent to that transfer by accepting this policy; we require our providers to apply adequate security.
We keep your data while your account is open. When you delete it we erase your personal data, except what we must keep by legal obligation. Technical access logs are kept for about one month at most.
You may exercise your rights of access, rectification, cancellation and opposition (ARCO), by writing to soporte@nuvio.cr. We answer within five business days.
If you believe your rights were not honoured you may go to the Costa Rican data protection agency (PRODHAB).
We apply reasonable technical and organizational measures (encryption in transit, access control, authentication verified on every request, data access limited to your own account). If a security incident affects your data, we will notify you, stating the nature of the incident, the data affected, the corrective measures taken and where to get more information, within two weeks of detecting it, and we will report it to PRODHAB.
We only keep necessary preferences in your browser (language, theme and session). We use no advertising or analytics cookies, so no cookie banner is shown.
The Service is not directed at people under 18 and we do not knowingly collect their data.
We will announce material changes in the Service. Questions and rights requests: soporte@nuvio.cr.