Privacy Policy

Who is the data controller

Fiscalance is a trading name of Kube IT Consulting FZCO, a free zone company registered in the United Arab Emirates, with its registered office at Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates. Kube IT Consulting FZCO (“we”, “us”) is the data controller for personal data processed through fiscalance.com, and is the company you contract with.

We are established outside the European Union, but we offer this service to people in the EU — so the GDPR applies to this processing under its Article 3(2), and every right described below is yours in full.

For any privacy question, or to exercise your rights, contact us at [email protected].

What data we collect

Account data: your email address and (if you set one) a display name, created when you sign up.

Business and financial figures you enter into the optimizer: day rate, billable days, business expenses, director salary, planned dividends, VAPZ/IPT contributions, and similar inputs used only to compute your optimizations. If you save a profile to your account, these figures are stored against it; if you use the tool without an account, they stay in your browser — unless you have allowed us to record what you enter (see our Cookie Policy), in which case a snapshot is stored on our server for 90 days and never linked to advertising.

Billing data: if you subscribe, Stripe (our payment processor) handles your card details directly — we never see or store your full card number. We keep a record of your subscription status, plan and renewal date so the app can unlock your report.

Technical data: standard server logs (IP address, browser user agent, timestamps) kept briefly for security and abuse prevention.

Why we process it (lawful basis)

To provide the service you asked for (contract): creating your account, running the optimizer, and unlocking paid features.

To meet legal obligations (legal obligation): keeping billing records for accounting and tax purposes.

With your consent, where required: for example, functional cookies/localStorage beyond what is strictly necessary, or optional analytics if enabled (see our Cookie Policy). Recording the figures you enter into the tools is one such optional purpose, and only happens if you allow it.

Legitimate interest: keeping the service secure and preventing abuse of the free tier or API.

Stripe as a processor

We use Stripe, Inc. to process subscription payments. Stripe acts as our processor for payment data and has its own privacy policy governing how it handles your card details. We only receive the minimum data needed to manage your subscription: a customer ID, subscription status and renewal date.

We also rely on a small number of other providers to run the service: Resend to send transactional email (sign-in links, unlock reminders, the newsletter you asked for), and Cloudflare, through which traffic to this site passes.

Your account, your figures and everything else in our database are stored on servers in Germany, rented from netcup GmbH. We are based in the United Arab Emirates and access that data from there in order to operate the service.

Our own analytics runs on software we host ourselves (Umami), so visit statistics are not shared with an analytics company.

Stripe, Resend and Cloudflare are established in the United States, so using them involves transferring personal data outside the EU. Those transfers rely on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

How long we keep your data

Account and profile data is kept for as long as your account is active. If you delete your account, your profile, business figures and subscription record are deleted from our database immediately; Stripe retains billing records as required by law for its own accounting obligations.

Server logs are kept for a short rolling window (typically a few weeks) and then discarded.

Security log: sign-ins, account changes and administrative actions are recorded for two years so we can investigate account problems. The IP address attached to an entry is erased after 90 days; the entry itself stays, without it.

Product analytics: if you allowed us to record the figures you enter, those snapshots are deleted automatically 90 days after they are collected, and immediately if you withdraw your permission or delete your account.

Embedded calculators: when one of our calculators is embedded on another website, nothing is written to your device — no cookie is set, no local storage is used. The row we store cannot carry a visitor id, a session id, or an account link: our database is built to refuse one. We cannot tell who entered a given set of figures, or that two entries came from the same person.

Anonymous statistics: we also keep aggregate counts of the figures entered into the optimizer and the calculators — for example, how many people entered a day rate between €500 and €600 in a given month. These counts are grouped into bands, contain no individual entry, and are kept indefinitely. The individual snapshots they are derived from are still deleted after 90 days, exactly as described above.

Purchase attempts: when you open a checkout we record that it happened and whether it completed, so we can tell a finished purchase from an abandoned one. It is deleted with your account.

We also keep daily counts of how often things happen — reports computed, checkouts opened — as plain numbers per market. They contain no identifier of any kind and cannot be traced back to a person, so they are kept indefinitely.

Your rights

Under the GDPR you have the right to access, correct, export and erase your personal data, and to object to or restrict certain processing.

Access & export: use “Download my data” on your Account page to receive a copy of the account, profile and subscription data we hold on you, in a machine-readable format.

Erasure: use “Delete account” on your Account page to permanently delete your account, business details and subscription record. This cannot be undone.

If you would rather not use the in-app tools, email [email protected] and we will action your request. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL — Commission Nationale de l’Informatique et des Libertés).

Cookies

Fiscalance uses only an essential session cookie (to keep you signed in) and functional browser storage (to remember your inputs and preferences). See our Cookie Policy for the full list, including any optional analytics.

Changes to this policy

We may update this policy as the service evolves. The “last updated” date at the top of this page reflects the latest revision.

Contact

Questions about this policy or your data: [email protected].