Privacy policy
Last updated: 30 September 2026. ANC.h.o.R analyses your bank statements: this page explains what we do with them, where they go and how long we keep them. This is a translation: the French version prevails.
1. Controller
Andrei A. Craciun, sole trader operating as ANC.h.o.R, SIRET 130 577 141 00018, 22 Rue Melvin Jones, 11300 Limoux, Aude. Contact: [email protected].
2. What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Carrying out your engagement | Identity, email, bank statements and exports, balances, information you give us | Performance of the contract | Financial data deleted at closing, 30 days after delivery at the latest |
| Payment and invoicing | Identity, email, amount, date. Card details are handled by Stripe, never by us | Legal obligation | 10 years for invoices |
| Answering site forms and following up | Name, email, company and headcount if you give them | Legitimate interest: answering your request | Forms: 12 months. Contacts who never bought: 3 years after last contact |
| Information emails, if you asked for them | Consent, which you can withdraw at any time | Until you unsubscribe |
3. Your bank statements
You upload your statements through a secure form (Tally). We import them into our analysis tool, which runs on the analyst's computer and sends them to no server, then delete them from the form. Working backups are encrypted. When your engagement closes, 30 days after delivery at the latest, all your financial data is deleted and you receive a certificate.
Your statements can indirectly reveal sensitive information, such as health, through some merchant names. We do not use it as such, and it is deleted with everything else.
We never ask for your banking login or codes. We do not sell or rent your data. No automated decision is made about you.
4. Where your data goes
Our providers are Cloudflare (site hosting and form handling), Tally (statement upload), Stripe (payment), Brevo (email delivery), ImprovMX and Google (mailbox). The site's fonts load from Google Fonts, which receives your browser's IP address when they do.
Some of these providers process data in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
5. Your rights
You can ask to access, correct, delete or port your data, restrict or object to its processing, and withdraw consent at any time. Write to [email protected]: we answer within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr).
6. Cookies
The site uses no advertising trackers and no audience measurement that needs consent. Payment goes through Stripe's secure module, which sets its own cookies needed to secure the payment.
7. Changes
We update this page when a provider or a purpose changes; the date at the top shows the latest version. The terms of sale are on this page.