Privacy Notice

This notice explains how personal data is handled when you use Zeno FinLabat zeno-fin.com. Zeno FinLab is an independent financial education, planning and analytical toolkit operated by its proprietor. Zeno FinLab is a trading/project name and does not constitute a separate legal entity.

For support, privacy requests and service enquiries: support@zeno-fin.com.

What happens to the figures you enter

If you are not signed in: income, spending, asset, liability and personal-financial-statement details you type into the toolkit stay in your browser. They are not written to the hosted database, and clearing your browser storage removes them.

If you are signed in: so that your figures follow you between devices, the toolkit saves your latest healthcheck figures and savings goal to your account in our hosted database. Access is restricted to your own signed-in account. You can clear them by removing the figures in the tool, and you can ask us to delete your account and its data at any time.

AI analysis: nothing is sent to our AI provider until you press "Generate insights" or "Estimate appreciation". At that point only the figures needed for that analysis are transmitted. Property-estimate requests can include country, city, area, property details and figures. Your account name and contact address are not included. Google Gemini processes requests through Lovable’s AI gateway. The toolkit records only feature, time and outcome metadata—not prompts, responses or financial values.

Advertising: your financial figures are never shared with advertising or analytics providers, and are not used to build an advertising profile.

Categories of personal data and purposes

• Financial figures you enter (and optional holder name, address, city, country and statement purpose) — to compute your assessment and generate the PDF report or personal financial statement. Legal basis: performance of a contract / your request.
• Purchase data (name, email, billing address, tax identifiers, payment method details) — collected and processed by Paddle as Merchant of Record to complete your purchase, issue invoices and handle tax. Legal basis: contract performance and legal obligation.
• Technical and usage data (IP address, device and browser type, pages viewed, error diagnostics) — to operate, secure and improve the Service and to prevent fraud and abuse. Legal basis: legitimate interests.
• Support messages you send us — to answer your query. Legal basis: legitimate interests.

Who we share data with

• Paddle.com Market Ltd — our Merchant of Record and reseller, for the sale of the report, payment processing, invoicing, tax compliance and buyer support.
• Service providers / subprocessors — hosting, content delivery, error monitoring and the AI provider used to produce insights and indicative property estimates.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where disclosure is required by law.

International transfers

Some providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or on Standard Contractual Clauses with appropriate supplementary measures.

Children

This Service is not intended for users under 18.

Retention

Figures held in your browser remain until you clear them or clear your browser storage. Figures saved to an account remain until you overwrite or clear them, or until account deletion completes. A deletion request currently has a 30-day cancellation period; the request itself does not prove final deletion has completed. Paddle retains purchase and invoicing records as required for payment, tax and accounting duties. Other data should be deleted or anonymised when no longer needed for its stated purpose.

Your rights

Subject to applicable law (including the GDPR), you may request access, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interests; where processing rests on consent you may withdraw it at any time. We respond within one month. You may also lodge a complaint with your local supervisory authority (in Cyprus, the Office of the Commissioner for Personal Data Protection).

Security

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS), access controls and least-privilege handling of credentials. Figures saved to an account are stored in a hosted database with access rules restricting each record to the account that created it.

Cookies and advertising

Essential storage: your cookie choice, your sign-in session, a local record of purchases made on this device, and cookies set by Paddle during checkout to process your payment securely. Google AdSense ad requests stay paused until you make a choice: “Accept all” permits personalised ads, while “Only essential” allows only non-personalised ads where Google's consent rules permit them. Your financial figures are never passed to advertising providers. You can reset your choice on the cookies page.

Contact

Service enquiries, privacy requests, technical support and other questions relating to the website: support@zeno-fin.com. Billing, invoice and refund questions can also be handled by Paddle at paddle.net.