Who is responsible for your data
The controller of personal data processed in connection with the website and the “Financist” service is Swipe Scape s.r.o. (“we”). The company’s details are given on the contact page.
For any matter concerning personal data, write to o.stepeniev@swipescape.eu.
With respect to the financial data a customer enters into the service, the customer determines the purposes and means of processing, and we process that data on the customer’s behalf as a processor. For the terms of such processing, contact us at the address above.
What information we process
- Account data: email address, password (stored only as a hash), first and last name if you provide them, interface language.
- Financial and accounting data you enter: accounts, transactions, counterparties, documents and attached files, budgets, workspace settings. These may include personal data of your counterparties and employees; the customer is responsible for the lawfulness of entering it.
- Team data: employee invitations, their roles and access rights.
- Data about interaction with the AI assistant: messages, replies and memory notes you keep in the service.
- Technical data: server logs (IP address, time and type of request, service identifiers) and an audit log of access and settings changes.
- Correspondence: messages you send us by email.
We do not collect data from banks: everything in your books is entered or imported by you.
Purposes and legal bases of processing
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating an account and providing the service | Account data, data you enter, team data | Performance of a contract or steps prior to entering into one (Art. 6(1)(b)) |
| Security, preventing abuse, fixing faults | Technical logs, audit log | Legitimate interests (Art. 6(1)(f)) |
| Replying to your enquiries and correspondence | Correspondence and contact data | Legitimate interests or performance of a contract (Art. 6(1)(f), 6(1)(b)) |
| Complying with legal requirements | Data required by law | Legal obligation (Art. 6(1)(c)) |
How long we keep data
- Account and workspace data is kept while you use the service. After you stop using it, we delete it or return it to you on request.
- Demo workspaces are temporary and are deleted automatically.
- Technical logs are kept for a limited period needed for security and fault resolution.
- Backups may contain data for some time after it has been deleted from the main system.
- Correspondence is kept for as long as needed to answer your enquiry and to protect our legitimate interests.
Who we share data with
We do not sell personal data and do not use it for advertising. Data may be received only by:
- the hosting provider whose servers run the service: Hetzner, a data centre in Germany (EU);
- the language model provider (Anthropic), if you use the AI assistant and a language model is enabled in the service: it receives your request and the data fragments needed for the answer;
- public authorities, where the law requires it.
If you connect your own Claude account to Financist, you initiate the exchange of data between Claude and Financist yourself; processing within Claude is governed by its provider’s terms. The connection can be revoked in settings.
Where data is transferred outside the European Economic Area (in particular to the language model provider), this is done using the mechanisms provided for by the General Data Protection Regulation (GDPR).
Cookies and trackers
This marketing website uses no cookies and no analytics trackers.
After sign-in, the app itself uses only technically necessary means: a session cookie and the browser’s local storage for the sign-in token and interface settings. They are needed for the service to work, are not used for advertising and are not passed to advertising networks.
Data security
We apply technical and organisational protection measures: workspace isolation, role-based access control, an audit log and a secure HTTPS connection. The verifiable mechanisms are listed on the Security page, which also states what the service does not do yet.
Your rights
Under the GDPR you have the right to:
- obtain confirmation of processing and access to your data;
- have inaccurate data corrected;
- have data erased where there is no ground to keep it;
- restrict processing;
- receive your data in a structured format (portability);
- object to processing based on legitimate interests;
- withdraw consent where processing is based on consent.
To exercise your rights, write to o.stepeniev@swipescape.eu. We may ask you to confirm your identity. You may also lodge a complaint with a supervisory authority: in the Czech Republic this is the Úřad pro ochranu osobních údajů.
Children
The service is intended for businesses and is not directed at people under 16. We do not knowingly collect their personal data.
Changes to this policy
We may update this policy. The current version is always published on this page, and the date of the last update is shown below. In the event of material changes we will notify you in a suitable way.
Version dated 31 October 2026.