Privacy Policy

1. Introduction

Auventra is operated by Mocube Consulting Inc. ("we", "us"), who acts as the data controller for personal data processed through this service. This policy explains what we collect, how we use it, who we share it with, how long we keep it, and your rights.

2. Information We Collect

We collect:

• Account data: name, email, password hash, business name.
• Financial data you enter or sync: invoices, clients, expenses, bills, bank transactions (via Plaid), and uploaded receipts.
• Billing data: subscription status and plan. Card details are collected and stored by Paddle, not by us.
• Usage and device data: IP address, browser/device identifiers, log events, and product telemetry.
• Support communications: messages you send us.

3. How We Use Your Data & Legal Basis

• To provide the service (account creation, bookkeeping features, bank sync) — legal basis: performance of a contract.
• To process payments and manage subscriptions — legal basis: performance of a contract.
• To secure the service and prevent fraud or abuse — legal basis: legitimate interests.
• To improve the product through aggregated analytics — legal basis: legitimate interests.
• To send service notifications and respond to support requests — legal basis: performance of a contract / legitimate interests.
• To comply with legal obligations (tax, accounting, anti-fraud) — legal basis: legal obligation.

We do not sell your personal data.

4. Data Sharing

We share personal data only with the following categories of recipients:

• Paddle.com Market Ltd. ("Paddle") — our Merchant of Record and payment processor. Paddle receives the personal data needed to sell the product, manage subscriptions, process payments, calculate and remit sales tax/VAT, issue invoices, and handle refunds and chargebacks. See Paddle's Privacy Notice.
• Hosting and infrastructure providers (Lovable Cloud / Supabase, Cloudflare) — to host the application and database.
• Bank connectivity providers (Plaid) — to sync bank transactions you opt into.
• Professional advisers (legal, accounting) where reasonably required.
• Authorities where required by law, court order, or to protect our rights.

5. Data Retention

We retain account and financial data for as long as your account is active. After you close your account, we delete or anonymise personal data within 90 days, except where we are required to retain it longer to meet legal, tax, accounting, or fraud-prevention obligations (typically up to 7 years for financial records). Backups containing your data are rotated and overwritten within 90 days.

6. Security

We use encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, contact us at support@auventra.app. You may also lodge a complaint with your local data protection authority.

8. International Transfers

Personal data may be processed outside your country of residence by our service providers (including Paddle, Plaid, and our hosting providers). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies. You can manage cookies through your browser settings.

10. Contact

For privacy questions, contact Mocube Consulting Inc. at support@auventra.app.