1. Who we are
This Privacy Policy explains how Vezne ("we," "us") collects, uses, and protects your personal data when you use the Service. For the purposes of applicable data protection law — including Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK") and, where relevant, the EU General Data Protection Regulation ("GDPR") — Vezne acts as the data controller. You can reach us atprivacy@vezne.app for any privacy question or to exercise the rights described below.
2. What data we collect
- Account data: your email address and password (stored as a salted hash — we never store or see your plain-text password).
- Financial data you provide: the transactions, categories, tags, and categorization rules you create, and the content of bank statement files you choose to import (date, amount, description, and similar fields).
- Usage data: basic account activity such as when you last used the Service, used internally to operate and secure your account.
We don't ask for your name, phone number, address, or date of birth, and we don't request your bank login credentials, card numbers, or IBAN — imports are files you upload yourself, not a live connection to your bank.
3. Why we process your data
We process account and financial data because it's necessary to provide the Service you've asked for — creating your account, storing and displaying your transactions, and running the features you use (KVKK Art. 5, GDPR Art. 6(1)(b) — performance of a contract). Where we ask for a separate, specific opt-in — for example, enabling AI-assisted PDF parsing — we rely on your consent (KVKK Art. 5, GDPR Art. 6(1)(a)), which you can withdraw at any time in Settings.
4. Who else sees your data
We don't sell your data or share it for advertising. A small number of third-party services help us run Vezne, and each only receives what it needs to do its job:
- Sign-in provider: if you choose to sign in with Google instead of a password, that provider handles the authentication step. We only receive your verified email address back.
- Bot-detection / abuse-prevention service: a challenge shown on the sign-up form to keep the Service free of automated abuse. It processes standard browser/network signals, not your financial data.
- Error-tracking service: used so we can find and fix bugs. It's configured to not collect personal information by default, and requests to authentication endpoints are excluded from what it sees entirely.
- AI parsing service (optional, off by default):if you turn on AI-assisted PDF import in Settings, the content of the PDF bank statement you upload is sent to this service to help extract transaction rows. This only happens for PDF files, and only if you've explicitly enabled it — it's off for every account by default, and CSV/Excel imports never use it.
Because some of these providers may process data outside Turkey, your data may be transferred internationally as a result of using these features, subject to those providers' own safeguards. Exact provider names are available on request — contact us using the details in Section 1.
5. Cookies and similar technologies
Vezne doesn't use cookies for tracking or advertising, and we don't run any analytics. Your sign-in session is kept in your browser's local storage, which is strictly necessary for the Service to work (keeping you signed in) and doesn't require a separate cookie-consent banner. The third-party services listed above may set their own strictly-necessary technical identifiers when their features are active (e.g. the bot-detection widget).
6. How long we keep your data
We keep your account and financial data for as long as your account is active. If you delete your account from Settings, it's deactivated immediately and kept for 30 days in case you want to restore it by signing back in. After 30 days, your categories, tags, transactions, and rules are permanently deleted, and your account record is anonymized.
7. Your rights
Depending on where you live, you may have the right to:
- Ask us what personal data we hold about you, and get a copy.
- Ask us to correct inaccurate data.
- Ask us to delete your data — you can already do this yourself from Settings → Delete account.
- Object to or restrict certain processing.
- Withdraw consent you previously gave (e.g. for AI-assisted PDF import), without affecting processing that happened before you withdrew it.
These correspond to the rights set out in KVKK Art. 11 and, for users in the European Economic Area, GDPR Art. 15-22. To exercise any of them, contact us using the details in Section 1. If you're in Turkey, you can also apply to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu); if you're in the EEA, you can lodge a complaint with your local data protection authority.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS) between your browser and our servers, salted password hashing, and access controls that keep every account's data isolated from every other account's.
9. Children
Vezne is not directed to, and we don't knowingly collect data from, children. If you believe a child has created an account, contact us and we'll take appropriate action.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, announced through the Service.