Privacy policy

1. Data controller

1.1. The controller of the personal data collected through the Services is Busimy, domiciled in the Argentine Republic.

1.2. For any question, request or complaint regarding the processing of their personal data, the User may contact Busimy at contact@busimy.com.

1.3. The personal data collected are incorporated into databases owned by Busimy, which are subject to the applicable personal data protection regulations, in particular Argentine Personal Data Protection Law No. 25,326, its Regulatory Decree No. 1558/2001 and the complementary provisions issued by the supervisory authority.

2. Definitions

2.1. "Personal data": information of any kind relating to identified or identifiable natural persons.

2.2. "Processing": systematic operations and procedures, electronic or otherwise, that allow the collection, retention, organization, storage, modification, linking, evaluation, blocking, destruction and, in general, the processing of personal data, as well as their disclosure to third parties through communications, queries, interconnections or transfers.

2.3. "Household": a shared space within the Services, made up of one or more Users, in which common transactions and balances are recorded.

2.4. "Event": a space within the Services for recording the expenses of a specific occasion, which may include people who are not part of the User’s Household.

2.5. "User Content": any information that the User enters, records, uploads or generates in the Services, including transactions, amounts, categories, notes, files and images.

2.6. "Providers": third parties that provide services to Busimy and process personal data on behalf of Busimy or in connection with the Services.

3. Personal data we collect

3.1. Account data: name, email address, password (stored exclusively as a hash, never in plain text), profile photo if the User chooses to upload one, language, currency, country and display preferences.

3.2. Authentication data: if the User chooses to sign in with Google or Apple, Busimy receives from those providers the User’s name and verified email address. If the User enables two-step verification, Busimy stores the verification secret and the recovery codes in encrypted form.

3.3. User Content: expense, income, currency exchange, adjustment and transfer transactions; amounts; currencies; dates; categories; wallets and accounts; payment methods, including their name, type and card closing and due dates; budgets; investments, including assets, quantities, values, rates, properties and rents; debts and loans; notes; photos of receipts or of Event expenses; and any other information the User chooses to record.

3.4. Household and Event data: the members of each Household or Event, participants’ names, the email addresses to which invitations were sent, expense splitting criteria, income declared for splitting purposes, balances between members and payments recorded between them.

3.5. Data from the Mercado Pago connection: if the User voluntarily connects their Mercado Pago account, Busimy obtains, with the authorization granted by the User, the connection’s identifiers, permissions and access tokens (stored in encrypted form) and the information about the account’s movements that the connection allows to be consulted, such as payments, income, transfers, withdrawals and returns, with their associated data (for example date, amount, currency, description, merchant, payment method, installments and counterparty identifiers). To do so, Busimy may query Mercado Pago and request the information and reports that the connection enables. Busimy is unable to make payments or transfers or to dispose of the User’s money.

3.6. Billing data: if the User subscribes to Busimy Plus, Busimy records the plan, billing interval, amount, currency, subscription status and the transaction identifiers provided by the payment processor. Busimy does not receive or store full credit or debit card numbers or other sensitive payment method data, which are processed directly by the payment processor.

3.7. Technical and usage data: approximate country; device and browser information; signed-in sessions and their last use; an account activity log for security and support purposes, without amounts or notes; use of the features (including artificial intelligence, in order to apply each plan’s limits); and server technical logs, which may include IP addresses and are kept for a limited time.

3.8. Browsing data collected by third parties: through the advertising services Busimy uses, such as Google AdSense, on the pages where ads are shown, as set out in section 8.

3.9. Communications: the content of the communications the User sends to Busimy by email or other means.

3.10. Busimy does not request or knowingly collect sensitive data within the meaning of section 2 of Law No. 25,326. The User undertakes not to include sensitive data about themselves or third parties in the notes, descriptions or files they upload to the Services.

4. Purposes of processing

4.1. To provide the Services: create and manage the User’s account; record, process and display User Content; calculate balances by currency, budgets, metrics, investment returns, debts and net worth; split expenses among the members of a Household or an Event and determine who owes whom.

4.2. To provide the AI-assisted entry features: interpret texts, dictation, photos, screenshots, card statements, investment portfolios and other files the User chooses to send, and suggest categories for transactions.

4.3. To import transactions from Mercado Pago where the User has authorized it, suggest their category, detect possible duplicates and notify the User of new transactions.

4.4. To obtain currency exchange rates and financial asset prices, for which Busimy queries public sources without transmitting the User’s personal data.

4.5. To send communications required for the operation of the Services, such as email address confirmation, password recovery, Household and Event invitations, and in-app notifications.

4.6. To manage the subscription, billing, renewal, pausing and cancellation of Busimy Plus.

4.7. To protect the security of accounts and of the Services, prevent fraud and abuse, and apply each plan’s usage limits.

4.8. To produce internal, aggregate statistics on the use of the Services in order to improve them, as set out in section 7.

4.9. To show advertising in the web application to Users of Households on the free plan, as set out in section 8.

4.10. To handle questions, requests and complaints, and to comply with applicable legal obligations and with requests from competent authorities.

5. Legal bases for processing

5.1. The processing of personal data is based on the User’s free, express and informed consent, given when signing up for and using the Services, and when voluntarily enabling specific features such as the Mercado Pago connection or AI-assisted entry.

5.2. Processing is also necessary for the performance of the contractual relationship between the User and Busimy arising from the use of the Services, for compliance with legal obligations and, as regards security, fraud prevention and the improvement of the Services, for the legitimate interests of Busimy, which do not override the User’s rights.

5.3. For Users located in the European Economic Area, the United Kingdom or Switzerland, the applicable legal bases are those set out in Article 6 of Regulation (EU) 2016/679 (General Data Protection Regulation) and equivalent rules, in particular the performance of a contract, consent, compliance with legal obligations and legitimate interest.

5.4. The User may withdraw their consent at any time, without retroactive effect, although withdrawal may prevent the full or partial provision of the Services.

6. Disclosure of data to third parties and Providers

6.1. Busimy does not sell, rent or trade the User’s personal data.

6.2. Busimy may disclose personal data to the Providers that render services to it, to the extent necessary to provide the Services, such as infrastructure and hosting, email and notification delivery, sign-in, artificial intelligence, advertising and payment processing. Among them, currently: (a) DigitalOcean, LLC, provider of the server infrastructure hosting the Services and the databases, with servers located in the United States of America; (b) Resend, provider of the email delivery service; (c) Google LLC, as provider of Sign in with Google and Google AdSense; (d) Apple Inc., as provider of Sign in with Apple; (e) Anthropic, PBC, provider of the artificial intelligence models used to interpret the texts, images and files the User chooses to send through the AI-assisted entry features, which does not use that information to train its models; (f) Mercado Libre S.R.L. and its affiliates (Mercado Pago), in connection with the connection of the User’s Mercado Pago account and the processing of Busimy Plus payments; (g) Expo (650 Industries, Inc.), provider of the phone notification service.

6.3. To obtain currency rates, asset prices, merchant logos and other public information, Busimy queries third-party services without sending them the User’s personal data.

6.4. Card statement files sent for interpretation through artificial intelligence are not stored by Busimy once processed. Profile, Household and Event expense photos are stored on Busimy’s servers.

6.5. Within the Services, the members of a Household can see the transactions recorded in that Household as shared, as well as the names, photos and income declared for splitting purposes of the other members. Transactions the User records as personal are visible only to that User. The participants of an Event can see that Event’s expenses, payments and balances.

6.6. Busimy’s administration staff have an internal panel showing information about the use of the Services, such as accounts, Households, activity, subscriptions and feature usage, without access to transaction amounts or notes.

6.7. Busimy may disclose personal data when required by law, court order or a request from a competent authority, or when necessary to protect the rights, property or safety of Busimy, the Users or third parties.

6.8. In the event of a merger, acquisition, reorganization or sale of all or part of Busimy’s assets, personal data may be transferred to the acquirer, who will be bound to comply with this Policy.

7. Usage statistics

7.1. Busimy measures the use of the Services mainly with its own tools and may use third-party tools for that purpose. Busimy does not sell information about how the User uses the Services.

7.2. Busimy may produce, from the data stored on its own servers, internal statistics on the use of the Services, such as the number of accounts, Households or transactions recorded, or the use of certain features. These statistics are produced in aggregate form, do not identify any particular User and are not sold or disclosed to third parties.

7.3. To understand and improve how the website and the application are used, and to tell automated visits apart, Busimy records information about the pages visited and the interaction with them, such as the page, the referring site, the approximate country, the device, the browser, the language, the length of the visit and some actions taken. When the User is signed in, this information is linked to their account, to understand how the application is used and to provide support; that of visitors who are not signed in is processed in pseudonymized form, without Busimy using it to identify them. It is kept for a maximum of four hundred (400) days.

8. Advertising

8.1. Busimy may show third-party ads, such as Google AdSense ads (a service of Google LLC), on the public website and in the Services for Users of Households on the free plan. Users of Households subscribed to Busimy Plus do not see ads within the Services.

8.2. Google and its partners may use cookies and similar technologies to show ads based on the User’s previous visits to this and other websites, measure their performance and prevent fraud. The use of these technologies is governed by Google’s privacy policies.

8.3. Busimy does not share User Content or financial information with advertisers or with Google.

8.4. The User can opt out of personalized advertising through Google’s ad settings at adssettings.google.com or through www.aboutads.info. Users located in the European Economic Area, the United Kingdom or Switzerland are asked, through a Google consent management platform, before cookies are used for advertising purposes, and can accept or reject their use and change their choice at any time.

9. Cookies and local storage

9.1. The Services use the browser’s or device’s local storage to keep the User signed in, their preferences and other information necessary for their operation, including, in the mobile applications, an encrypted copy of information so they can be used offline. This information is not shared with third parties.

9.2. Third-party advertising services, such as Google AdSense, may use cookies and similar technologies for advertising purposes on the pages where ads are shown, as set out in section 8.

9.3. The User can configure their browser to block or delete cookies and local storage data. Blocking local storage may prevent signing in or the proper operation of the Services.

10. International transfers

10.1. The User’s personal data are stored on servers located in the United States of America and may be processed by Providers located in that country or in other jurisdictions.

10.2. The User acknowledges that those jurisdictions may not offer a level of personal data protection equivalent to that of the Argentine Republic. Busimy seeks to ensure that the Providers it works with adopt appropriate security and confidentiality measures, and the User gives their express consent to such transfers under section 12 of Law No. 25,326.

11. Retention period

11.1. Busimy retains personal data while the User’s account remains active and for as long as necessary to fulfil the purposes described in this Policy.

11.2. The User may delete their account at any time from Profile, "Delete my account". As a result, their personal data, their personal transactions and the Households in which the User is the only member are deleted, and their Mercado Pago account is disconnected.

11.3. In Households shared with other Users, the transactions recorded as shared are kept so as not to alter the balances and accounts of the other members, but the name and email address of the User who deleted their account are removed.

11.4. Backups are renewed automatically and kept for a maximum of fourteen (14) days, after which deleted information no longer exists in them.

11.5. Busimy may retain certain information for longer periods where required by applicable law, in particular tax and accounting rules regarding billing transactions, or where necessary for the establishment, exercise or defense of legal claims.

12. User rights

12.1. The User, as the data subject, may exercise the right to access their personal data free of charge at intervals of no less than six (6) months, unless a legitimate interest is shown, as provided in section 14(3) of Law No. 25,326.

12.2. The User also has the right to request the rectification, updating and, where applicable, deletion or confidentiality of their personal data, under section 16 of Law No. 25,326. Busimy will respond to access requests within ten (10) calendar days and to rectification, updating or deletion requests within five (5) business days of receipt.

12.3. THE AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Supervisory Authority of Law No. 25,326, has the power to handle the complaints and claims filed by those whose rights are affected by non-compliance with the rules in force regarding personal data protection.

12.4. Users located in the European Economic Area, the United Kingdom or Switzerland also have the rights of access, rectification, erasure, restriction of processing, data portability, objection and not to be subject to decisions based solely on automated processing, as well as the right to lodge a complaint with the competent supervisory authority.

12.5. Much of the data can be viewed, modified and deleted directly within the Services. To exercise any other right, the User must send their request to contact@busimy.com, and Busimy may ask for additional information to verify their identity.

12.6. The User may at any time disconnect their Mercado Pago account from the Services’ settings or revoke the authorization from their Mercado Pago account, and may cancel Busimy Plus.

13. Automated decisions and artificial intelligence

13.1. The Services’ artificial intelligence features generate suggestions, such as the interpretation of a receipt or the category of a transaction, which the User reviews before they are recorded. No transaction suggested by these features is saved without the User’s confirmation.

13.2. Busimy does not make decisions based solely on automated processing that produce legal effects concerning the User or similarly significantly affect them.

13.3. Suggestions generated by artificial intelligence may contain errors. The User is solely responsible for verifying the accuracy of the information they record in the Services.

14. Security

14.1. Busimy takes reasonable technical and organizational measures to protect personal data against alteration, loss, unauthorized access or processing, including encryption of communications through HTTPS, storage of passwords as hashes, encryption of two-step verification secrets and Mercado Pago access tokens, logical separation of each Household’s data, the option to enable two-step verification, and account activity logging.

14.2. Notwithstanding the above, no method of transmission or storage of information is completely secure, so Busimy cannot guarantee the absolute security of the data. The User is responsible for keeping their password and the devices from which they access the Services confidential and secure.

14.3. In the event of a security incident affecting the User’s personal data, Busimy will take the necessary measures to mitigate its effects and will notify it in the cases and within the time limits required by applicable law.

15. Third-party data

15.1. By inviting other people to a Household or an Event, recording their names as participants or entering information about third parties, the User declares that they have the authorization of those people to disclose their data to Busimy for the purposes described in this Policy.

15.2. Busimy will use invited people’s email addresses solely to send them the corresponding invitation.

16. Minors

16.1. The Services are not directed to children under thirteen (13) years of age, and Busimy does not knowingly collect their personal data. If Busimy becomes aware that data of a child under that age have been collected without the authorization of their parents or legal guardians, it will delete them.

16.2. Minors under eighteen (18) years of age must have the authorization of their parents or legal guardians to use the Services.

17. Third-party links and services

17.1. The Services may contain links to third-party websites or services, including ads. Busimy is not responsible for the privacy practices of those third parties, and the User is advised to read their respective privacy policies.

17.2. The processing of data by Mercado Pago, Google, Apple and other providers with which the User interacts directly is also governed by those providers’ terms and policies.

18. Changes to this Policy

18.1. Busimy may modify this Policy at any time. The current version will always be available at busimy.com/privacy, together with the date of its last update.

18.2. In the event of material changes, Busimy will inform the User through the Services or by email. Use of the Services after the changes take effect will constitute acceptance of them.

19. Governing law and jurisdiction

19.1. This Policy is governed by the laws of the Argentine Republic.

19.2. Any dispute arising from the interpretation or application of this Policy will be submitted to the competent courts of the Argentine Republic, without prejudice to the rights granted to the User by the consumer protection or data protection laws of their place of residence.

20. Contact

20.1. For any question, request or complaint regarding this Policy or the processing of their personal data, the User may contact Busimy at contact@busimy.com.