ARGENTUS
Sign in

Privacy Policy

Last updated November 8, 2026

Argentus is operated by JUMO LABS, a SASU registered in France (SIREN: 995 326 949) ("we", "our", "us"). We are the data controller for the personal data processed through Argentus. Financial data is sensitive, and this Privacy Policy explains what we collect, why, who we share it with, and the rights you have over it.

1. Data We Collect

1.1 Account Information

When you create an account, we collect:

  • Your email address
  • Your password, stored only as a secure hash by our authentication provider
  • If you sign in with Google, your name, email address, and profile picture from your Google account
  • A unique user identifier for your account

1.2 Bank Account Data (With Your Authorisation)

When you connect a bank through our open banking provider, GoCardless, we receive:

  • Account details: Account name, holder name, IBAN or account number, currency, and the name of your bank
  • Balances: Current and available balances
  • Transactions: Date, amount, currency, description, counterparty name, and related reference information

We never receive or store your online banking credentials, and our access is read-only.

1.3 Data You Enter

We store the information you add yourself, including:

  • Manual accounts and transactions
  • Categories, transfers, notes, and edits to imported transactions
  • Budgets and forecast settings
  • Investment holdings and trades

1.4 Usage Data

We collect limited technical information to run and improve the Service:

  • Page views and basic device information (browser, operating system, country) through Vercel Web Analytics, which does not use cookies
  • On argentus.xyz, the pages you view, where your visit came from, and whether you joined the waitlist, counted through PostHog without cookies or anything else stored on your device. PostHog tells visits apart with a code made from your IP address and browser, which changes every day, so it can't follow you from one day to the next. We rely on our legitimate interest in knowing how the site is used
  • If you accept analytics cookies, the pages and features you use, clicks, where your visit came from, and errors, through PostHog. PostHog masks the text on the page and in forms, so it never records your amounts, balances, or transactions
  • If you accept advertising cookies, whether you arrived from one of our Google ads and went on to join the waitlist or create an account, through Google Ads
  • Server logs, including IP address, request details, and errors, used for security and debugging

1.5 Waitlist

If you join the waitlist on argentus.xyz, we collect your email address and the date you joined. To keep bots off the waitlist, the form runs Cloudflare Turnstile, which receives technical data such as your IP address and browser details when you submit the form.

2. How We Use Your Data

We use your data to:

  • Provide the Service: Import and display your accounts, balances, and transactions; categorise spending; calculate budgets, net worth, investment performance, and forecasts
  • Secure the Service: Authenticate you, prevent fraud and abuse, and protect your account
  • Communicate with you: Invite you from the waitlist, send account emails such as sign-up confirmation and password resets, and respond to your requests
  • Improve the Service: Understand how features are used and fix errors
  • Comply with the law: Meet our legal and regulatory obligations

We never use your financial data for advertising, and we do not sell your data.

3. Legal Bases (GDPR)

We process your personal data on the following legal bases:

  • Performance of a contract: To provide the Service you signed up for, including importing and analysing your financial data
  • Steps you ask for before a contract: To keep your place on the waitlist and invite you to create an account
  • Consent: To connect your bank accounts, and to use analytics and advertising cookies. You can withdraw consent at any time, by removing the connection or from Cookie settings
  • Legitimate interests: To secure, maintain, and improve the Service, as long as these interests are not overridden by your rights
  • Legal obligation: Where we must keep or disclose data by law

Transaction data can sometimes reveal sensitive information, such as payments to a health provider or a political party. We only process it to show you your own finances and never use it to profile you.

4. Who We Share Data With

4.1 Service Providers

We share data only with providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:

  • Supabase: Authentication and database hosting
  • Google: Sign-In (if you choose it), hosting of our API on Google Cloud, and Google Ads measurement (only if you accept advertising cookies)
  • PostHog: Product analytics, hosted in the EU (only if you accept analytics cookies)
  • GoCardless Bank Account Data: Open banking connections to your bank
  • Vercel: Hosting of the web application and privacy-friendly analytics
  • Cloudflare: Turnstile, the bot check on the waitlist form
  • Twelve Data, Coinbase, and Frankfurter: Market prices and exchange rates. We only send them ticker symbols, currencies, and dates, never your personal data or holdings

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal or financial data.

4.3 Other Disclosures

We may disclose your data only:

  • With your consent
  • To comply with the law, a court order, or a request from a public authority
  • To protect the rights, property, or safety of Argentus, our users, or others
  • In a business transfer, such as a merger or acquisition, in which case we will notify you

5. International Transfers

Some of our providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised by the European Commission, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

6. Data Security

We protect your data with industry-standard measures, including:

  • Encrypted connections (HTTPS/TLS) for all traffic
  • Encryption at rest in our database
  • Row-level access controls so each user can only access their own data
  • Read-only bank connections through a regulated provider

No system is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities as required by law.

7. Data Retention

We keep your data as follows:

  • Account, bank, and financial data: Until you delete your account
  • Bank connections: Until you remove them, or until your bank authorisation expires
  • Waitlist: Until you create your account, or until you ask us to remove you
  • Server logs: Up to 90 days
  • Backups: Up to 30 days after deletion

We may keep some data longer where the law requires it.

8. Your Rights

Under the GDPR and French data protection law, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data and delete your account
  • Restrict or object to certain processing
  • Data portability: Receive your data in a structured, machine-readable format
  • Withdraw consent at any time, for example by removing a bank connection
  • Set instructions for what happens to your data after your death

To exercise any of these rights, email us at argentus@jumolabs.com. We respond within one month.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority in your country of residence.

9. Cookies and Local Storage

Some cookies and browser storage are necessary for the Service or store your preferences, and are always on:

  • Authentication cookies: Keep you signed in
  • Preference cookies and local storage: Remember settings such as your theme, whether balances are hidden, forecast scenarios, and your cookie choices

Two kinds are optional, and only set if you accept them in the cookie banner on your first visit:

  • Analytics cookies: PostHog, to understand which pages and features people use
  • Advertising cookies: Google Ads, to measure which of our ads bring people to Argentus

Until you choose, neither sets cookies. In the meantime, and if you reject them, PostHog only counts visits to argentus.xyz without cookies (see 1.4). Rejecting them takes one click, as accepting does. You can change your choice at any time from Cookie settings, at the foot of every page and in the app's settings. Your choice applies to argentus.xyz and app.argentus.xyz, and we ask again after six months.

10. Children

Argentus is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or with a notice in the Service, and update the "Last updated" date above.

12. Contact Us

If you have questions or requests about this Privacy Policy or your data:

  • Service: Argentus
  • Legal Entity: JUMO LABS (SASU)
  • SIREN: 995 326 949
  • SIRET: 995 326 949 00014
  • Email: argentus@jumolabs.com

Read our Terms of Service for the rules that apply to using Argentus.