Privacy policy

1. Who is responsible for your data

Presupeso is a product of YSNOne («we»), which acts as data controller for the personal data collected when you use Presupeso, under Colombian Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015).

For anything about your data, write to [email protected].

2. What data we process

Your account data

To sign in you use your YSNOne account (OneAccount). From it we receive your name, your email and whether it's verified, your profile photo (if any), an account identifier and the organization you pay with. Presupeso stores no passwords.

Your financial data

What you enter in Presupeso, or record through your AI or another YSNOne app you link: your budgets, accounts and their type, starting balances, transactions (amount, date, account, category, payee and notes), categories, goals, assignments and exchange rates. This is personal financial data and we treat it with the care it deserves.

Artificial intelligence data

• Your AI keys (Gemini, Claude or OpenAI), if you choose to add one for the built-in assistant. They're stored encrypted and only their last four characters are shown.
• Your conversations with the built-in assistant, so you can pick them up again. You can delete them.
• Usage of the MCP connection (Claude, ChatGPT or another AI you connect): which tool was used, when, from which client and whether it worked. We use it for security, support and to improve the service.

The change log

Every change to your budget leaves a line with what was done, when, by whom and through which door (the app, the assistant, a connected AI or another YSNOne app). It's yours and you can review it.

Subscription data

Your subscription status, trial and renewal dates and payment history. Payments are made with the YSNOne Balance (OnePayment): Presupeso never receives or stores your card or bank details.

Technical data

A session cookie to keep you signed in, another with the language you chose and, for a few minutes and only in memory, the IP address of each request to stop abuse. We don't use advertising or third-party tracking cookies.

3. What we use it for

• To provide the service: calculate your budget, balances, goals and reports.
• So that your AI, if you connect it, can work with your budget on your behalf.
• To charge the subscription and let you know its status.
• For security: detecting and stopping unauthorized access and abuse.
• To support you when you write to us.
• To know how Presupeso is doing with aggregate figures (how many people use it, how many transactions are recorded per channel). The team counts, it doesn't read: our console has no screen that shows a person's transactions, balances or categories.

What we don't do: we don't sell or rent your data, we don't use it for advertising, we don't use it to train artificial intelligence models and we don't connect to your bank.

4. Artificial intelligence

The built-in assistant, with your key

When you talk to the assistant, your message and the budget data needed to answer you are sent to the provider you chose (Google, Anthropic or OpenAI) using your own key. You request that transfer, it is also governed by your terms with that provider, and that provider charges the cost. The provider may be located outside Colombia.

Claude, ChatGPT or another AI over MCP

If you connect an AI over MCP, you authorize it yourself with your YSNOne account (OAuth). From then on that app can read your budget and, unless it's set to «read only», record changes on your behalf. What it reads travels to that AI's company under your agreement with them. You can set it to «read only» or turn it off in Presupeso's settings, and remove the connection in the AI itself whenever you want.

5. Who we share data with

• Infrastructure providers that host our servers and databases, as data processors bound by confidentiality.
• The other pieces of the YSNOne family: OneAccount (so you can sign in) and OnePayment (for the Balance and payments).
• YSNOne apps you link (for example GastroSquad or OneSales), only as far as you authorize when linking them.
• Your AI provider or connected AI, only when you use it, as explained above.
• Authorities, when a law or a valid order requires it.

6. Where your data is

Our servers and those of AI providers may be outside Colombia. Any international data transfer will be made to countries with an adequate level of protection or with the safeguards required by Colombian law. By using Presupeso and, where applicable, connecting or using an AI, you authorize that transfer.

7. How long we keep it

• Your financial data, for as long as you have your Presupeso account.
• If you delete your account from the app, your budgets (those that are only yours), change log, conversations, keys and links are deleted immediately. Backups rotate on their own and deleted data disappears from them in the normal rotation cycle.
• What the law requires us to keep (for example, accounting records of payments) is kept for as long as the law requires.

8. Your rights

As the data subject, under Law 1581 of 2012, you have the right to:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Know what we've used your data for.
• Revoke the authorization and ask us to delete your data, when there's no legal or contractual duty to keep it.
• Access your data free of charge.
• File complaints with the Superintendence of Industry and Commerce (SIC), after making your request or claim with us.

You exercise many of these rights yourself in the app: see and correct everything, export your data and delete your account. For anything else, write to [email protected] from your account's email. We answer requests within ten (10) business days and claims within fifteen (15) business days, extendable in the cases provided by law.

9. Security

We protect your data with technical and organizational measures: encrypted connections, encrypted AI keys, sign-in through OneAccount, protection against common attacks and minimal team access. Details in Security. No system is invulnerable: if there were ever an incident affecting your data, we'd let you know and report it to the authority as the law requires.

10. Minors

Presupeso is for adults. We don't knowingly collect data from minors.

11. Changes to this policy

If we change this policy in an important way, we'll let you know in the app or by email before it applies. The last update date is shown above.