Vunto
Back to home
EN ▾
ESEspañolENEnglishFRFrançaisPTPortuguêsITItalianoDEDeutsch

Privacy Policy

Last updated: June 2026

At Vunto we take your privacy seriously. This policy explains what data we collect, for what purpose and what rights you have, in accordance with GDPR and Spanish data protection law.

1. Data controller

The controller of your data is Vunto. For privacy questions and rights requests you may write to privacidadvunto.ai. The controller's complete identifying details will be published before general registration opens or live payments start. You can also use the contact form as the primary channel.

2. What data we collect

  • Account data: name, email address and login credentials.
  • Financial data you enter: portfolios, expenses, income and net worth you voluntarily record in the app.
  • Usage data: pages visited, interactions and technical data for security and improvement purposes.
  • Payment data: handled by secure providers; Vunto does not store full card numbers.

3. Purpose and legal basis

  • Provide the Service and manage your account: performance of a contract.
  • Process payments and subscriptions: performance of a contract and legal obligation.
  • Improve the Service and security: legitimate interest.
  • Send marketing communications or newsletters: consent, revocable at any time.

4. AI features and profiling

AI-powered analysis features process the financial data you have entered to generate personalised educational information (for example, an analysis of portfolio concentration). This processing is based on performance of the contract, does not produce legal effects or automated decisions within the meaning of Article 22 GDPR, and its results are always identified as AI-generated. Data sent to AI providers is limited to what is necessary and is not used to train their models.

5. Data retention

We keep your data while you maintain an active account and, thereafter, for the periods required by law. When no longer needed, it will be deleted or anonymized.

6. Who we share data with and international transfers

We only share data with providers that deliver services to us under contract: Vercel, Supabase, Stripe, Resend, Sentry, Vercel Analytics, PostHog EU if enabled, Upstash, market data, AI services and Cloudflare Turnstile if enabled. We do not sell your data.

Some providers may process data outside the European Economic Area. In those cases, appropriate GDPR safeguards apply.

7. Cookies

We use technical cookies necessary for operation and, with your consent, analytics cookies. You can change your decision at any time from Configure cookies.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to privacidadvunto.ai. You also have the right to lodge a complaint with the Spanish Data Protection Agency. You can also use the contact form as the primary channel.

9. Security

We apply reasonable technical and organizational measures to protect your data. No system is 100% foolproof, but we work to minimize risks.

10. Minors

The Service is not directed at people under 18. We do not knowingly collect data from minors. If we detect that such data has been provided, we will delete it.

11. Changes to this policy

We may update this policy. We will post changes on this page with the corresponding date.