Privacy notice
Privacy at Open Balance.
Who we are
Open Balance is a product of Sector Processing LTD, a company registered in England and Wales, company number 17211287. For account, billing, support, security, and consent metadata, and for the encrypted vault data we store as ciphertext, we act as the data controller. Contact us at hello@openbalance.co.uk, or see "Your rights" below for data protection requests specifically.
What this website collects today
We do not run analytics, advertising pixels, contact forms, embedded third-party widgets, or newsletter tracking, see our Cookie notice.
If you email us
We process your email address and message to reply and keep an appropriate record. Please don't put financial detail in an email to us, if you're a customer never provide any login information, that detail belongs in your encrypted vault, not in a support inbox.
What's encrypted, and what we can read
Your financial data is encrypted on your own device before it reaches us, using keys we never see. That includes:
- Accounts, balances, income and payments
- Assets, liabilities and debts
- Notes, labels and categories
- Scenarios and forecast settings
If you lose both your vault key and your recovery code, your data is permanently unrecoverable. We can't reset, restore, or unlock it for you. If you export your data, the exported copy is no longer protected by Open Balance's encryption, it's your file, and it's on you to store it safely from that point.
Why we process what we process
- Account and login
- Necessary to perform our contract with you.
- Billing
- Necessary to perform our contract with you, and to meet legal obligations (tax and accounting records).
- Security logging
- Our legitimate interest in keeping accounts secure and detecting abuse.
- Support
- Necessary to perform our contract with you.
- Legal compliance
- Necessary to meet a legal obligation.
- News and Information
- Only with your separate, opt-in consent, never bundled with using the product.
Where your data is, and under what law
Open Balance is a UK-incorporated company serving UK-only users, and financial data is stored only on UK-based servers, with no international transfer of that data. Stripe, our billing processor and sole sub-processor, is the exception, since card payments necessarily involve a global network. Your payment details are handled by Stripe, not by us, and we never see your full card number. Stripe's own privacy policy applies to the data they process on our behalf. UK based means UK law applies, including the Investigatory Powers Act, and we'd rather say that plainly than leave it unstated.
Your rights
You have the right to ask about access, rectification, erasure, restriction, objection, and portability, where those rights apply to the data in question. For data protection requests, email gdpr@sectorprocessing.com. We'll ask enough to confirm it's really you before acting on account-level requests. You can also raise a concern with the UK Information Commissioner's Office at any time; that right exists independently of anything we do.