Privacy policy

Version of 28 July 2026 — eight sections, plain language.

1. Data controller

The data controller is [COMPANY NAME — TO FILL], registered office at [ADDRESS]. Contact: contact@avurufinance.com. Data protection officer: [IF APPOINTED — TO FILL].

2. What this website collects

• Newsletter — your email address and language, only if you sign up through the form. Unsubscribe anytime.
• Audience measurement — self-hosted and cookieless: aggregated data (page views, country, device type), no profiling, nothing shared with third parties.
• Functional local storage — a preference saved in your browser (e.g. dismissing the announcement bar), never sent to our servers.

No third-party cookies, no advertising trackers — which is why this site shows no cookie banner.

3. What the application collects

• Account — email, name, preferences.
• Read-only banking data — balances and transactions, through PSD2-licensed aggregation providers. Avuru never sees or stores your bank credentials: they stay with your bank.
• Usage data — for security and service improvement.
• Referrals — the referred person's email address, for the sole purposes described in section 6 of the terms.

4. Purposes & legal bases

• Performance of the contract — providing the service you subscribed to.
• Consent — newsletter, bank connection; withdrawable at any time.
• Legitimate interest — security, fraud prevention, service improvement, the referral programme.
• Legal obligations — where the law requires it.

5. Recipients & processors

Your data is accessible only to strictly necessary processors: PSD2-licensed aggregation providers [NAMES — TO FILL], hosting in the European Union [HOST — TO FILL], email delivery tool [TO FILL].

Never any sale of data. Transfers outside the EU: none [TO CONFIRM].

6. Retention periods

• Account — for the life of the account, then [X — TO DEFINE] months after deletion.
• Newsletter — until you unsubscribe.
• Referred person's email — deleted if no sign-up occurs within [X — TO DEFINE] days.
• Technical logs — [X — TO DEFINE] months.

7. Your rights

You have the rights of access, rectification, erasure, portability, objection and restriction, as well as the right to withdraw your consent at any time. To exercise them: contact@avurufinance.com.

You may also lodge a complaint with the CNPD (Commission nationale pour la protection des données — the Luxembourg data protection authority): cnpd.public.lu.

8. Security

Encryption in transit and at rest, read-only PSD2 bank access, least-privilege principle, access logging. In the event of a data breach, we notify the authority and the people concerned in accordance with the GDPR.

A question about your data? Write to us: contact@avurufinance.com.