{"platform":"Balance","slug":"balance","category":"Workflow & Automation","website":"https://getbalance.ai","risk_rating":"medium","verification":"fully_verified","verification_detail":{"tier":"fully_verified","partial_reason_code":"none","partial_reason_label":"Complete","blocked_core_documents":[]},"rating":{"value":"medium","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_complete","canonical":"https://airinetwork.com/platform/balance","machine_url":"https://airinetwork.com/api/machine/platform/balance","last_reviewed":"2026-09-21","findings_count":44,"findings":[{"id":"privacy-data-use-bbaff204b41a17cd8960","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-bbaff204b41a17cd8960","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements:\n Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager.\n Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it.\n Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication.\n Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records).\n Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Keeping%20your%20data,with%20clear%20escalation%20steps.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9600,"char_end":10869,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-9e80b0703f07905834bf","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-9e80b0703f07905834bf","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Balance is a business-to-business (B2B) service. We provide financial reconciliation services to businesses, not to individual consumers. Our customers interact with us through business communication channels (WhatsApp, Slack, and email) rather than through a consumer-facing website or application. We do not knowingly collect personal data from children (individuals under 18). If we become aware that personal data of a child has been included in financial documents we process, we will notify the relevant customer.\n . Changes to This Policy","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20is%20a,Changes%20to%20This%20Policy","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":10890,"char_end":11436,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-71dd29d058f29533209e","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-71dd29d058f29533209e","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Balance Technologies, Inc. (\"Balance\", \"we\", \"us\", or \"our\") operates the Balance financial reconciliation platform available at app.getbalance.ai (the \"Service\"). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service.\n Balance Technologies, Inc. is a Delaware corporation. Services are delivered through our group companies, including Balance Technologies Ltd (United Kingdom) and Balance Technologies ApS (Denmark). References to Balance in this policy include all group entities.\n We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679), and the Danish Data Protection Act (Databeskyttelsesloven).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20Technologies%2C%20Inc.,Data%20Protection%20Act%20(Databeskyttelsesloven).","structural_citation":"Privacy Policy › “Introduction”","citation_basis":"heading_path","char_start":270,"char_end":1104,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-aa16d53d35fb8af11a18","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-aa16d53d35fb8af11a18","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For personal data we collect about you as a user of our Service (such as your account information), Balance Technologies, Inc. is the Data Controller. Our contact details are:\n Balance Technologies, Inc.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20For%20personal%20data,are%3A%20Balance%20Technologies%2C%20Inc.","structural_citation":"Privacy Policy › “Data Controller”","citation_basis":"heading_path","char_start":1123,"char_end":1327,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-0f1834e21d4abcb76308","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-0f1834e21d4abcb76308","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Data Protection Contact: Gus Levinson, CTO.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Data%20Protection%20Contact%3A%20Gus%20Levinson%2C%20CTO.","structural_citation":"Privacy Policy › “Data Controller”","citation_basis":"heading_path","char_start":1361,"char_end":1405,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-e7943c64f3601ca024ee","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-e7943c64f3601ca024ee","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Supplier and customer names, addresses, and identifiers.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Supplier%20and%20customer%20names%2C%20addresses%2C%20and%20identifiers.","structural_citation":"§ 3.2 (Financial Data (Processed on Behalf of Customers))","citation_basis":"section_number","char_start":2274,"char_end":2331,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-b173b818411031133737","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-b173b818411031133737","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" 3.3 Email Data\n Where a customer authorises Gmail or Google Workspace email integration, we access:\n Email body content (to identify and extract financial information).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%203.3%20Email%20Data,and%20extract%20financial%20information).","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2392,"char_end":2561,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-a13ddb528d696b43d34d","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-a13ddb528d696b43d34d","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Email metadata (subject lines, sender information, timestamps).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Email%20metadata%20(subject%20lines%2C%20sender%20information%2C%20timestamps).","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2563,"char_end":2627,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-5e9c9ed6b18d3fad58c4","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-5e9c9ed6b18d3fad58c4","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Email attachments (invoices and receipts for processing).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Email%20attachments%20(invoices%20and%20receipts%20for%20processing).","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2629,"char_end":2687,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-827df9b25df5a49c0e55","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-827df9b25df5a49c0e55","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages.\n Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption.\n 3.4 Communication Data\n When you interact with us via WhatsApp, Slack, or email, we process:\n Messages and queries sent to our AI assistant (Bea) and our team.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20This%20access%20is,(Bea)%20and%20our%20team.","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2689,"char_end":3863,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-c9fe1450704befc1da84","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-c9fe1450704befc1da84","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Slack user IDs and WhatsApp phone numbers used for communication.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Slack%20user%20IDs,numbers%20used%20for%20communication.","structural_citation":"§ 3.4 (Communication Data)","citation_basis":"section_number","char_start":3865,"char_end":3931,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-f69189274e199c82944b","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-f69189274e199c82944b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Our internal platform generates technical logs (error logs, performance data) which may incidentally contain personal data. These logs are used for debugging and service reliability only.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Our%20internal%20platform,and%20service%20reliability%20only.","structural_citation":"§ 3.4 (Communication Data)","citation_basis":"section_number","char_start":3933,"char_end":4121,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-f716d43166d2ee9b2f78","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-f716d43166d2ee9b2f78","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We process personal data under the following lawful bases:\n Contract (Art. 6(1)(b)): Processing necessary for the performance of our contract with you, including providing the Service, managing your account, and processing financial data on your behalf. \n Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, including AI-assisted financial analysis, maintaining security of our systems, and improving our Service. We balance these interests against your rights and freedoms. \n Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20process%20personal,and%20regulatory%20compliance%20requirements.","structural_citation":"Privacy Policy › “Lawful Basis for Processing”","citation_basis":"heading_path","char_start":4152,"char_end":4830,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-dfde288207cc621f0807","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-dfde288207cc621f0807","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" 3.1 Customer and Contact Data\n When you engage Balance as a customer, we collect:\n Contact name and email address.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%203.1%20Customer%20and,name%20and%20email%20address.","structural_citation":"§ 3.1 (Customer and Contact Data)","citation_basis":"section_number","char_start":1724,"char_end":1839,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-800f7aa7391d2003a678","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-800f7aa7391d2003a678","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" 3.2 Financial Data (Processed on Behalf of Customers)\n As a Processor acting on our customers' instructions, we process:\n Bank account details and transaction records (synced from accounting software such as E-conomic, Xero, or QuickBooks).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%203.2%20Financial%20Data,E-conomic%2C%20Xero%2C%20or%20QuickBooks).","structural_citation":"§ 3.2 (Financial Data (Processed on Behalf of Customers))","citation_basis":"section_number","char_start":1955,"char_end":2196,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"privacy-data-use-47a99b97fae76149e06a","permalink":"https://airinetwork.com/platform/balance/finding/privacy-data-use-47a99b97fae76149e06a","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Receipts, invoices, and supporting documents (including PDFs and images).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Receipts%2C%20invoices%2C%20and,(including%20PDFs%20and%20images).","structural_citation":"§ 3.2 (Financial Data (Processed on Behalf of Customers))","citation_basis":"section_number","char_start":2198,"char_end":2272,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"moderation-enforcement-163b8cd1c264380ae3a7","permalink":"https://airinetwork.com/platform/balance/finding/moderation-enforcement-163b8cd1c264380ae3a7","surface":"moderation_enforcement","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal effects; our AI features assist but do not make final decisions without human review.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Rights%20related%20to,decisions%20without%20human%20review.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9078,"char_end":9315,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"data-retention-4bb96be9a3ecf3620d92","permalink":"https://airinetwork.com/platform/balance/finding/data-retention-4bb96be9a3ecf3620d92","surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:\n Account data: retained for the duration of your account and deleted within 90 days of account closure.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8008,"char_end":8217,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"data-retention-cd939bd4f2379712ccb9","permalink":"https://airinetwork.com/platform/balance/finding/data-retention-cd939bd4f2379712ccb9","surface":"data_retention","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Financial documents and transaction data: retained as directed by the customer (Controller) under the DPA, or for a default period of 7 years for tax/regulatory compliance.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Financial%20documents%20and,years%20for%20tax%2Fregulatory%20compliance.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8219,"char_end":8392,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"data-retention-160246330ccea0cbb3ff","permalink":"https://airinetwork.com/platform/balance/finding/data-retention-160246330ccea0cbb3ff","surface":"data_retention","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" AI processing logs: 12 months, with automated deletion.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20AI%20processing%20logs%3A,months%2C%20with%20automated%20deletion.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8394,"char_end":8450,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-e7194808a3f07ecae988","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-e7194808a3f07ecae988","surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" We do not sell personal data to third parties. We do not share personal data for advertising purposes.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20do%20not,data%20for%20advertising%20purposes.","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6480,"char_end":6583,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-51ed9b9737fe54c3c545","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-51ed9b9737fe54c3c545","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For all transfers to the United States, we ensure appropriate safeguards are in place, including:\n Standard Contractual Clauses (SCCs) approved by the European Commission.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20For%20all%20transfers,by%20the%20European%20Commission.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":7661,"char_end":7833,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-6de76e3603ab041ed9d3","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-6de76e3603ab041ed9d3","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20The%20UK%20International,to%20the%20EU%20SCCs.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":7835,"char_end":7918,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-a1168b1f9c4364e133b2","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-a1168b1f9c4364e133b2","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Where applicable, participation in the EU-US Data Privacy Framework.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Where%20applicable%2C%20participation,EU-US%20Data%20Privacy%20Framework.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":7920,"char_end":7989,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-aefdf08e674222f42591","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-aefdf08e674222f42591","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" When we process financial data on behalf of our customers (such as bank transactions, receipts, and invoices belonging to their clients), we act as a Data Processor. In that case, our customer is the Data Controller, and processing is governed by our Data Processing Agreement (DPA).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20When%20we%20process,Data%20Processing%20Agreement%20(DPA).","structural_citation":"Privacy Policy › “Data Controller”","citation_basis":"heading_path","char_start":1407,"char_end":1691,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-41265b40d7077b598610","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-41265b40d7077b598610","surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include:\n Cloud infrastructure providers (hosting, storage, databases).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20share%20personal,providers%20(hosting%2C%20storage%2C%20databases).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":5914,"char_end":6208,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-caef308f952a3644a565","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-caef308f952a3644a565","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" AI providers (document analysis, categorisation).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20AI%20providers%20(document%20analysis%2C%20categorisation).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6210,"char_end":6260,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-c14dfeac9b01b52444b9","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-c14dfeac9b01b52444b9","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Authentication providers (identity verification).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Authentication%20providers%20(identity%20verification).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6262,"char_end":6312,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-4c1ff0ce286a0d4fa9ce","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-4c1ff0ce286a0d4fa9ce","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Accounting software providers (integration partners such as E-conomic, Xero, and QuickBooks).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Accounting%20software%20providers,E-conomic%2C%20Xero%2C%20and%20QuickBooks).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6314,"char_end":6408,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"subprocessors-data-sharing-9922d39c8a1839f14783","permalink":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-9922d39c8a1839f14783","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Communication providers (Slack, email, WhatsApp for notifications).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Communication%20providers%20(Slack%2C%20email%2C%20WhatsApp%20for%20notifications).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6410,"char_end":6478,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-b6efe89d2e168c140b2a","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-b6efe89d2e168c140b2a","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" To exercise any of these rights, contact us at privacy@getbalance.ai. We will respond within one month as required by law. If we process your data as a Processor on behalf of one of our customers, we will direct your request to the relevant Controller.\n . How We Protect Your Data","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20To%20exercise%20any,We%20Protect%20Your%20Data","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9317,"char_end":9598,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-f06fc3b30df7c3b0d8ae","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-f06fc3b30df7c3b0d8ae","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The effective date at the top of this policy indicates when it was last revised.\n . Complaints","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20may%20update,last%20revised.%20.%20Complaints","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":11438,"char_end":11704,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-94c7b8e0297eed1b7130","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-94c7b8e0297eed1b7130","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:\n United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20If%20you%20are,Office%20(ICO)%20%E2%80%94%20ico.org.uk","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":11706,"char_end":11910,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-0afe9c7fac69c0382571","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-0afe9c7fac69c0382571","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Denmark: Datatilsynet (Danish Data Protection Agency) — datatilsynet.dk","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Denmark%3A%20Datatilsynet%20(Danish,Protection%20Agency)%20%E2%80%94%20datatilsynet.dk","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":11912,"char_end":11984,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-eee4a76668674b8ddb29","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-eee4a76668674b8ddb29","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We encourage you to contact us first at privacy@getbalance.ai so we can attempt to resolve your concern.\n . Contact Us","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20encourage%20you,concern.%20.%20Contact%20Us","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":11986,"char_end":12105,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-79f4cf25d45016af6657","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-79f4cf25d45016af6657","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" If you have questions about this Privacy Policy or our data protection practices:\n Email: privacy@getbalance.ai","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20If%20you%20have,protection%20practices%3A%20Email%3A%20privacy%40getbalance.ai","structural_citation":"Privacy Policy › “Nature of Service”","citation_basis":"heading_path","char_start":12107,"char_end":12219,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-1ad16ae5cee3da5b5835","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-1ad16ae5cee3da5b5835","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Balance Technologies, Inc. is incorporated in the United States. However, all primary data storage (databases and document storage) is hosted within the European Economic Area (EU, Amsterdam region). Customer data at rest remains within the EEA.\n Limited transfers of personal data to the United States occur in the following circumstances:\n AI processing: when documents are analysed by our AI providers, data is transmitted to US-based API servers for processing. These providers operate under zero data retention (ZDR) agreements — no customer data is stored after the API call completes.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20Technologies%2C%20Inc.,the%20API%20call%20completes.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":6615,"char_end":7207,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-c996ca854cee17496ae4","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-c996ca854cee17496ae4","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Authentication: Firebase Authentication (Google) processes login credentials, which may transit US infrastructure.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Authentication%3A%20Firebase%20Authentication,may%20transit%20US%20infrastructure.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":7209,"char_end":7324,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-65c02892118386a14352","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-65c02892118386a14352","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" AI agent execution: our AI assistant (Bea) runs tasks in isolated cloud sandboxes provided by E2B (FoundryLabs, Inc.), which may be hosted in the United States. Sandboxes are ephemeral and destroyed after each task.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20AI%20agent%20execution%3A,destroyed%20after%20each%20task.","structural_citation":"Privacy Policy › “International Data Transfers”","citation_basis":"heading_path","char_start":7326,"char_end":7542,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-a43c0d4bebe8b2d894ff","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-a43c0d4bebe8b2d894ff","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Under the UK GDPR and EU GDPR, you have the following rights:\n Right of access: request a copy of the personal data we hold about you.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Under%20the%20UK,we%20hold%20about%20you.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":8558,"char_end":8693,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-e1518e28c5c9967dd5b4","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-e1518e28c5c9967dd5b4","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Right to rectification: request correction of inaccurate data.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20rectification%3A,correction%20of%20inaccurate%20data.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":8695,"char_end":8758,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-8c93e476e73cc5631fdf","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-8c93e476e73cc5631fdf","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Right to erasure: request deletion of your data (subject to legal obligations).","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20erasure%3A,(subject%20to%20legal%20obligations).","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":8760,"char_end":8840,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-2848c1ad0f013a4848b7","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-2848c1ad0f013a4848b7","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Right to restrict processing: request limitation of how we use your data.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20restrict,we%20use%20your%20data.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":8842,"char_end":8916,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}},{"id":"audit-rights-dpa-residency-977f83b24a9e613caf8f","permalink":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-977f83b24a9e613caf8f","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Right to object: object to processing based on legitimate interests.","caution":null,"provenance":{"source_url":"https://getbalance.ai/privacy","snapshot_sha256":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378","wayback_url":null,"deep_link":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20object%3A,based%20on%20legitimate%20interests.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9007,"char_end":9076,"retrieved_at":"2026-07-19T23:47:48.78508+00:00"}}],"documents":[{"doc_type":"terms","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-08-21","last_verified_scan":"2026-08-21","verified_scan_count":2},{"doc_type":"privacy","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-09-21","last_verified_scan":"2026-09-21","verified_scan_count":4}],"clause_intelligence":{"clauses_count":144,"risk_patterns_count":36,"stance_events_count":36,"patterns_by_family":{"data_retention":12,"ip_ownership":2,"legal_burden":1,"privacy_sharing":10,"training_use":11},"risk_summary":{"medium":9,"low":15,"high":12},"evidence":[{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"high","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8008,"char_end":8217}},{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"medium","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs. Where applicable, participation in the EU-US Data Privacy Framework. Data Retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure. Financial documents and transaction data: ...","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs. Where applicable, participation in the EU-US Data Privacy Framework. Data Retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure. Financial documents and transaction data: retained as directed by the customer (Controller) under the DPA, or for a default period of 7 years for tax/regulatory compliance. AI processing logs: 12 months, with automated deletion. Technical logs: retained for 12 months. For full details, see our Data Retention Policy. Your Rights Under the UK GDPR and EU GDPR, you have the following rights: Right of access: request a copy of the personal data we hold about you. Right to rectification: request correction of inaccurate data. Right to erasure: request deletion of your data (subject to legal obligations). Right to restrict processing: request limitation of how we use your data. Right to data portability: receive your data in a structured, machine-readable format. Right to object: object to processing based on legitimate interests. Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal effects; our AI features assist but do not make final decisions without human review.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=The%20UK%20International%20Data,without%20human%20review.%20","structural_citation":null,"citation_basis":"unavailable","char_start":7559,"char_end":9008}},{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"medium","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8008,"char_end":8217}},{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"medium","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8035,"char_end":8244}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"high","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8008,"char_end":8217}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs. Where applicable, participation in the EU-US Data Privacy Framework. Data Retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure. Financial documents and transaction data: ...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs. Where applicable, participation in the EU-US Data Privacy Framework. Data Retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure. Financial documents and transaction data: retained as directed by the customer (Controller) under the DPA, or for a default period of 7 years for tax/regulatory compliance. AI processing logs: 12 months, with automated deletion. Technical logs: retained for 12 months. For full details, see our Data Retention Policy. Your Rights Under the UK GDPR and EU GDPR, you have the following rights: Right of access: request a copy of the personal data we hold about you. Right to rectification: request correction of inaccurate data. Right to erasure: request deletion of your data (subject to legal obligations). Right to restrict processing: request limitation of how we use your data. Right to data portability: receive your data in a structured, machine-readable format. Right to object: object to processing based on legitimate interests. Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal effects; our AI features assist but do not make final decisions without human review.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=The%20UK%20International%20Data,without%20human%20review.%20","structural_citation":null,"citation_basis":"unavailable","char_start":7559,"char_end":9008}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"To exercise any of these rights, contact us at privacy@getbalance.ai. We will respond within one month as required by law. If we process your data as a Processor on behalf of one of our customers, we will direct your request to the relevant Controller. . How We Protect Your Data Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDP...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"To exercise any of these rights, contact us at privacy@getbalance.ai. We will respond within one month as required by law. If we process your data as a Processor on behalf of one of our customers, we will direct your request to the relevant Controller. . How We Protect Your Data Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements: Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager. Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it. Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication. Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records). Step 5: Monitor and improve. We regularly assess our security measures and update them as needed.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=To%20exercise%20any%20of,them%20as%20needed.%20","structural_citation":null,"citation_basis":"unavailable","char_start":9008,"char_end":10471}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8008,"char_end":8217}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements: Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager. Step 2: Contr...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements: Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager. Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it. Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication. Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records). Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Keeping%20your%20data,with%20clear%20escalation%20steps.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9600,"char_end":10869}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Account data: retained for the duration of your account and deleted within 90 days of account closure.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure.","structural_citation":"Privacy Policy › “Data Retention”","citation_basis":"heading_path","char_start":8035,"char_end":8244}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements: Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager. Step 2: Contr...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements: Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager. Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it. Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication. Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records). Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Keeping%20your%20data,with%20clear%20escalation%20steps.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":9627,"char_end":10896}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"7.1 Term. These Terms begin on your first use of the Services and continue until terminated. 7.2 Termination. Either party may terminate on 30 days' written notice. Balance may suspend or terminate immediately for material breach (including non-payment more than 30 days overdue) or where required for anti-money-laundering compliance. 7.3 Effect of termination. Balance will provide an export of your Customer Data i...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"7.1 Term. These Terms begin on your first use of the Services and continue until terminated. 7.2 Termination. Either party may terminate on 30 days' written notice. Balance may suspend or terminate immediately for material breach (including non-payment more than 30 days overdue) or where required for anti-money-laundering compliance. 7.3 Effect of termination. Balance will provide an export of your Customer Data in a machine-readable format and delete Customer Data within 90 days (subject to backup cycles), except where legally required to retain: up to 7 years for UK clients (HMRC record-keeping rules) or 5 years for Danish clients (Bogføringsloven § 12). 7.4 Survival. Sections 4, 8, 9, 10, 11, 12, 13, 16, and 17 survive termination.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%207.1%20Term.%20These,and%2017%20survive%20termination.","structural_citation":"§ 7.1","citation_basis":"section_number","char_start":8383,"char_end":9131}},{"pattern_key":"user_retains_ownership","pattern_family":"ip_ownership","risk_rating":"low","confidence":"medium","stance_key":"content_ownership","stance_value":"user_retains_rights","evidence":"6. Fees, Billing, and Taxes Fees are as set out in your Order Form. Fees are exclusive of VAT and other applicable taxes. Invoices are payable within 14 days unless otherwise agreed. Late payments may result in suspension of the Services after 30 days' overdue notice. 7. Term, Renewal, and Termination 7.1 Term. These Terms begin on your first use of the Services and continue until terminated. 7.2 Termination. Eith...","reason":"The clause affirms user ownership or retention of rights.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"prompt_ownership","quote":"6. Fees, Billing, and Taxes Fees are as set out in your Order Form. Fees are exclusive of VAT and other applicable taxes. Invoices are payable within 14 days unless otherwise agreed. Late payments may result in suspension of the Services after 30 days' overdue notice. 7. Term, Renewal, and Termination 7.1 Term. These Terms begin on your first use of the Services and continue until terminated. 7.2 Termination. Either party may terminate on 30 days' written notice. Balance may suspend or terminate immediately for material breach (including non-payment more than 30 days overdue) or where required for anti-money-laundering compliance. 7.3 Effect of termination. Balance will provide an export of your Customer Data in a machine-readable format and delete Customer Data within 90 days (subject to backup cycles), except where legally required to retain: up to 7 years for UK clients (HMRC record-keeping rules) or 5 years for Danish clients (Bogføringsloven § 12). 7.4 Survival. Sections 4, 8, 9, 10, 11, 12, 13, 16, and 17 survive termination. 8. Intellectual Property You retain all rights in Customer Data. Balance retains all rights in the Services, including software, models, prompts, and categorisation logic. Feedback, suggestions, or improvement ideas you provide may be used by Balance without obligation. Balance may use aggregated and anonymised usage data (no identifiable Customer Data) to improve the Services. 9. Confidentiality Each party will treat the other's non-public information as confidential and use it only to perform or receive the Services.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=6.%20Fees%2C%20Billing%2C%20and,receive%20the%20Services.%20","structural_citation":null,"citation_basis":"unavailable","char_start":7821,"char_end":9394}},{"pattern_key":"user_retains_ownership","pattern_family":"ip_ownership","risk_rating":"low","confidence":"medium","stance_key":"content_ownership","stance_value":"user_retains_rights","evidence":"You retain all rights in Customer Data. Balance retains all rights in the Services, including software, models, prompts, and categorisation logic. Feedback, suggestions, or improvement ideas you provide may be used by Balance without obligation. Balance may use aggregated and anonymised usage data (no identifiable Customer Data) to improve the Services.","reason":"The clause affirms user ownership or retention of rights.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"prompt_ownership","quote":"You retain all rights in Customer Data. Balance retains all rights in the Services, including software, models, prompts, and categorisation logic. Feedback, suggestions, or improvement ideas you provide may be used by Balance without obligation. Balance may use aggregated and anonymised usage data (no identifiable Customer Data) to improve the Services.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%20You%20retain%20all,to%20improve%20the%20Services.","structural_citation":"§ 8 (Intellectual Property)","citation_basis":"section_number","char_start":9158,"char_end":9514}},{"pattern_key":"liability_limitation","pattern_family":"legal_burden","risk_rating":"medium","confidence":"medium","stance_key":"legal_burden","stance_value":"liability_limited","evidence":"11.1 Cap. To the maximum extent permitted by law, Balance's total aggregate liability arising out of or relating to these Terms is limited to the fees paid by you in the one (1) month immediately preceding the claim, or such other amount specified in your Order Form. 11.2 Excluded damages. Neither party is liable for indirect, consequential, special, or punitive damages, loss of profits, loss of revenue, loss of g...","reason":"The clause limits liability or disclaims warranties.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"indemnity_liability","quote":"11.1 Cap. To the maximum extent permitted by law, Balance's total aggregate liability arising out of or relating to these Terms is limited to the fees paid by you in the one (1) month immediately preceding the claim, or such other amount specified in your Order Form. 11.2 Excluded damages. Neither party is liable for indirect, consequential, special, or punitive damages, loss of profits, loss of revenue, loss of goodwill, loss of data, or loss of business opportunity. 11.3 Tax penalties carve-out. Balance is not liable for any tax penalties, fines, interest, or audit costs imposed by any tax or regulatory authority. 11.4 Carve-back. Nothing in these Terms limits liability for (a) death or personal injury caused by negligence, (b) fraud or fraudulent misrepresentation, (c) gross negligence or wilful misconduct, or (d) any other liability that cannot be limited under applicable law.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%2011.1%20Cap.%20To,limited%20under%20applicable%20law.","structural_citation":"§ 11.1","citation_basis":"section_number","char_start":10154,"char_end":11051}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"high","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20do%20not,data%20for%20advertising%20purposes.","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6480,"char_end":6583}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"AI providers (document analysis, categorisation). Authentication providers (identity verification). Accounting software providers (integration partners such as E-conomic, Xero, and QuickBooks). Communication providers (Slack, email, WhatsApp for notifications). We do not sell personal data to third parties. We do not share personal data for advertising purposes. International Data Transfers Balance Technologies, I...","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"AI providers (document analysis, categorisation). Authentication providers (identity verification). Accounting software providers (integration partners such as E-conomic, Xero, and QuickBooks). Communication providers (Slack, email, WhatsApp for notifications). We do not sell personal data to third parties. We do not share personal data for advertising purposes. International Data Transfers Balance Technologies, Inc. is incorporated in the United States. However, all primary data storage (databases and document storage) is hosted within the European Economic Area (EU, Amsterdam region). Customer data at rest remains within the EEA. Limited transfers of personal data to the United States occur in the following circumstances: AI processing: when documents are analysed by our AI providers, data is transmitted to US-based API servers for processing. These providers operate under zero data retention (ZDR) agreements — no customer data is stored after the API call completes. Authentication: Firebase Authentication (Google) processes login credentials, which may transit US infrastructure. AI agent execution: our AI assistant (Bea) runs tasks in isolated cloud sandboxes provided by E2B (FoundryLabs, Inc.), which may be hosted in the United States. Sandboxes are ephemeral and destroyed after each task. Communication platforms: messages sent via Slack (Salesforce) and WhatsApp (Meta) transit US-based infrastructure. For all transfers to the United States, we ensure appropriate safeguards are in place, including: Standard Contractual Clauses (SCCs) approved by the European Commission.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=AI%20providers%20(document%20analysis%2C,the%20European%20Commission.%20","structural_citation":null,"citation_basis":"unavailable","char_start":5958,"char_end":7559}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"How we use it: extracted financial documents are stored and processed for your bookkeeping. Non-financial email content is not retained. Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models. Human access: Human review of Google User Data occurs only where necessary for Service d...","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"How we use it: extracted financial documents are stored and processed for your bookkeeping. Non-financial email content is not retained. Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models. Human access: Human review of Google User Data occurs only where necessary for Service delivery with your consent (our accountants reviewing AI-extracted financial documents before they are finalised), for security investigation, to comply with applicable law, or in aggregated/anonymised form for internal operations. Encryption: TLS 1.2+ in transit; AES-128 or stronger at rest. Retention and deletion: Google User Data is retained for the duration of your account. On request, Balance will delete all Google User Data within 7 business days. Contact privacy@getbalance.ai. 4.4 Reliance. Balance relies in good faith on the accuracy, completeness, and timeliness of information you provide. We do not independently verify facts, documents, or transactions you submit. 5. Customer Responsibilities You agree to: provide timely, accurate, and complete information; maintain the security of your account credentials; review and approve material outputs before relying on them for statutory purposes; retain responsibility for all tax submissions, statutory filings, and regulatory obligations in your jurisdiction; comply with anti-money-laundering checks we are legally required to perform (including identity verification and beneficial-ownership disclosure); use the Services only for lawful business purposes.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=How%20we%20use%20it%3A,lawful%20business%20purposes.%20","structural_citation":null,"citation_basis":"unavailable","char_start":6179,"char_end":7821}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20do%20not,data%20for%20advertising%20purposes.","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6480,"char_end":6583}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We do not sell personal data to third parties. We do not share personal data for advertising purposes.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20do%20not,data%20for%20advertising%20purposes.","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":6507,"char_end":6610}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%20Sharing%3A%20Google%20User,to%20train%20AI%20models.","structural_citation":"§ 4.3","citation_basis":"section_number","char_start":6549,"char_end":6741}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20share%20personal,providers%20(hosting%2C%20storage%2C%20databases).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":5914,"char_end":6208}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements. Use of Artificial Intelligence Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Imp...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements. Use of Artificial Intelligence Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to train AI models. We may review this position in the future and will update this policy and seek appropriate consent or lawful basis before any such change. For higher-complexity or higher-importance tasks, AI-generated results are reviewed by our internal team before being shared with customers. For routine, lower-complexity tasks, AI may communicate results directly to customers via WhatsApp, Slack, or email, with the AI escalating to our team when necessary. We retain AI processing logs for service improvement and debugging purposes. These logs are subject to our Data Retention Policy. Sub-processors and Data Sharing We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=6(1)(c))%3A%20Processing%20necessary%20to,(hosting%2C%20storage%2C%20databases).%20","structural_citation":null,"citation_basis":"unavailable","char_start":4448,"char_end":5958}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20share%20personal,providers%20(hosting%2C%20storage%2C%20databases).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":5914,"char_end":6208}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20We%20share%20personal,providers%20(hosting%2C%20storage%2C%20databases).","structural_citation":"Privacy Policy › “Sub-processors and Data Sharing”","citation_basis":"heading_path","char_start":5941,"char_end":6235}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"high","stance_key":"model_training","stance_value":"training_permitted","evidence":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to ...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to train AI models. We may review this position in the future and will update this policy and seek appropriate consent or lawful basis before any such change. For higher-complexity or higher-importance tasks, AI-generated results are reviewed by our internal team before being shared with customers. For routine, lower-complexity tasks, AI may communicate results directly to customers via WhatsApp, Slack, or email, with the AI escalating to our team when necessary. We retain AI processing logs for service improvement and debugging purposes. These logs are subject to our Data Retention Policy.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20uses%20third-party,our%20Data%20Retention%20Policy.","structural_citation":"Privacy Policy › “Use of Artificial Intelligence”","citation_basis":"heading_path","char_start":4864,"char_end":5879}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements. Use of Artificial Intelligence Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Imp...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements. Use of Artificial Intelligence Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to train AI models. We may review this position in the future and will update this policy and seek appropriate consent or lawful basis before any such change. For higher-complexity or higher-importance tasks, AI-generated results are reviewed by our internal team before being shared with customers. For routine, lower-complexity tasks, AI may communicate results directly to customers via WhatsApp, Slack, or email, with the AI escalating to our team when necessary. We retain AI processing logs for service improvement and debugging purposes. These logs are subject to our Data Retention Policy. Sub-processors and Data Sharing We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include: Cloud infrastructure providers (hosting, storage, databases).","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=6(1)(c))%3A%20Processing%20necessary%20to,(hosting%2C%20storage%2C%20databases).%20","structural_citation":null,"citation_basis":"unavailable","char_start":4448,"char_end":5958}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"How we use it: extracted financial documents are stored and processed for your bookkeeping. Non-financial email content is not retained. Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models. Human access: Human review of Google User Data occurs only where necessary for Service d...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"How we use it: extracted financial documents are stored and processed for your bookkeeping. Non-financial email content is not retained. Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models. Human access: Human review of Google User Data occurs only where necessary for Service delivery with your consent (our accountants reviewing AI-extracted financial documents before they are finalised), for security investigation, to comply with applicable law, or in aggregated/anonymised form for internal operations. Encryption: TLS 1.2+ in transit; AES-128 or stronger at rest. Retention and deletion: Google User Data is retained for the duration of your account. On request, Balance will delete all Google User Data within 7 business days. Contact privacy@getbalance.ai. 4.4 Reliance. Balance relies in good faith on the accuracy, completeness, and timeliness of information you provide. We do not independently verify facts, documents, or transactions you submit. 5. Customer Responsibilities You agree to: provide timely, accurate, and complete information; maintain the security of your account credentials; review and approve material outputs before relying on them for statutory purposes; retain responsibility for all tax submissions, statutory filings, and regulatory obligations in your jurisdiction; comply with anti-money-laundering checks we are legally required to perform (including identity verification and beneficial-ownership disclosure); use the Services only for lawful business purposes.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=How%20we%20use%20it%3A,lawful%20business%20purposes.%20","structural_citation":null,"citation_basis":"unavailable","char_start":6179,"char_end":7821}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to ...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to train AI models. We may review this position in the future and will update this policy and seek appropriate consent or lawful basis before any such change. For higher-complexity or higher-importance tasks, AI-generated results are reviewed by our internal team before being shared with customers. For routine, lower-complexity tasks, AI may communicate results directly to customers via WhatsApp, Slack, or email, with the AI escalating to our team when necessary. We retain AI processing logs for service improvement and debugging purposes. These logs are subject to our Data Retention Policy.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20uses%20third-party,our%20Data%20Retention%20Policy.","structural_citation":"Privacy Policy › “Use of Artificial Intelligence”","citation_basis":"heading_path","char_start":4864,"char_end":5879}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to ...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Balance uses third-party AI services via API to provide automated receipt analysis, transaction matching, expense categorisation, journal entry creation, financial reporting, and to answer questions and analysis requests from our customers. Important information about our AI processing: All AI processing occurs via API calls with zero data retention (ZDR) agreements in place. No customer data is currently used to train AI models. We may review this position in the future and will update this policy and seek appropriate consent or lawful basis before any such change. For higher-complexity or higher-importance tasks, AI-generated results are reviewed by our internal team before being shared with customers. For routine, lower-complexity tasks, AI may communicate results directly to customers via WhatsApp, Slack, or email, with the AI escalating to our team when necessary. We retain AI processing logs for service improvement and debugging purposes. These logs are subject to our Data Retention Policy.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20uses%20third-party,our%20Data%20Retention%20Policy.","structural_citation":"Privacy Policy › “Use of Artificial Intelligence”","citation_basis":"heading_path","char_start":4891,"char_end":5906}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models.","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Sharing: Google User Data is shared only with the sub-processors listed in our Privacy Policy. We do not sell, transfer, or use Google User Data for advertising, or use it to train AI models.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%20Sharing%3A%20Google%20User,to%20train%20AI%20models.","structural_citation":"§ 4.3","citation_basis":"section_number","char_start":6549,"char_end":6741}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. O...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption. 3.4 Communication Data When you interact with us via WhatsApp, Slack, or email, we process: Messages and queries sent to our AI assistant (Bea) and our team. Slack user IDs and WhatsApp phone numbers used for communication. Our internal platform generates technical logs (error logs, performance data) which may incidentally contain personal data. These logs are used for debugging and service reliability only. Lawful Basis for Processing We process personal data under the following lawful bases: Contract (Art. 6(1)(b)): Processing necessary for the performance of our contract with you, including providing the Service, managing your account, and processing financial data on your behalf. Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, including AI-assisted financial analysis, maintaining security of our systems, and improving our Service. We balance these interests against your rights and freedoms. Legal Obligation (Art.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=Balance%20cannot%20send%2C%20modify%2C,Legal%20Obligation%20(Art.%20","structural_citation":null,"citation_basis":"unavailable","char_start":2990,"char_end":4448}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"3.4 AI training on your data. Balance does not train AI models on your Customer Data or on Google User Data. Our third-party AI providers do not train on your data — this is contractually prohibited and technically enforced through zero data retention agreements. If Balance ever intends to change this, we will give you at least 30 days' prior written notice, update these Terms with an effective date, and provide a...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"3.4 AI training on your data. Balance does not train AI models on your Customer Data or on Google User Data. Our third-party AI providers do not train on your data — this is contractually prohibited and technically enforced through zero data retention agreements. If Balance ever intends to change this, we will give you at least 30 days' prior written notice, update these Terms with an effective date, and provide a persistent in-product opt-out. Your Customer Data will be excluded from any future training use if you opt out. 4. Customer Data, Third-Party Accounts, and Gmail/OAuth Access 4.1 Ownership. You own all Customer Data. Balance acts as Data Processor for personal data contained in Customer Data; you are the Data Controller. Processing is governed by our DPA. 4.2 Authority to connect accounts. You grant Balance a limited authority to access and use your third-party accounts (Gmail, banking, accounting software, messaging platforms) on your behalf, solely to deliver the Services. You represent that you are the account holder or have authority from the account holder to connect each such account. 4.3 Google User Data disclosure. When you authorise Balance to connect your Gmail account: Scope requested: https://www.googleapis.com/auth/gmail.readonly only. This is a read-only scope enforced by Google at the API level. Balance cannot send, modify, or delete messages in your Gmail account, even in principle. What we access: email bodies, email metadata (subject, sender, date), and attachments, solely to identify and extract receipts, invoices, and financial documents.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=3.4%20AI%20training%20on,and%20financial%20documents.%20","structural_citation":null,"citation_basis":"unavailable","char_start":4584,"char_end":6179}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages. Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.go...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages. Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption. 3.4 Communication Data When you interact with us via WhatsApp, Slack, or email, we process: Messages and queries sent to our AI assistant (Bea) and our team.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20This%20access%20is,(Bea)%20and%20our%20team.","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2689,"char_end":3863}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages. Google API Disclosure: Balance’s use of information received from the Gmail API adheres to Google’s API Services User Data Policy, including the Limited Use requirements. We request only the https://www.go...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages. Google API Disclosure: Balance’s use of information received from the Gmail API adheres to Google’s API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption. 3.4 Communication Data When you interact with us via WhatsApp, Slack, or email, we process: Messages and queries sent to our AI assistant (Bea) and our team.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20This%20access%20is,(Bea)%20and%20our%20team.","structural_citation":"§ 3.3 (Email Data)","citation_basis":"section_number","char_start":2716,"char_end":3890}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"3.3 No solely-automated decisions with legal effect. Balance does not use AI to make solely-automated decisions with legal or similarly significant effect on you. Any output with such effect — including bookkeeping entries affecting your statutory records, categorisations affecting tax positions, and filings prepared on your behalf — is subject to human review before taking effect. 3.4 AI training on your data. Ba...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"3.3 No solely-automated decisions with legal effect. Balance does not use AI to make solely-automated decisions with legal or similarly significant effect on you. Any output with such effect — including bookkeeping entries affecting your statutory records, categorisations affecting tax positions, and filings prepared on your behalf — is subject to human review before taking effect. 3.4 AI training on your data. Balance does not train AI models on your Customer Data or on Google User Data. Our third-party AI providers do not train on your data — this is contractually prohibited and technically enforced through zero data retention agreements. If Balance ever intends to change this, we will give you at least 30 days' prior written notice, update these Terms with an effective date, and provide a persistent in-product opt-out. Your Customer Data will be excluded from any future training use if you opt out.","source_url":"https://getbalance.ai/terms","deep_link":"https://getbalance.ai/terms#:~:text=%203.3%20No%20solely-automated,if%20you%20opt%20out.","structural_citation":"§ 3.3","citation_basis":"section_number","char_start":4419,"char_end":5336}}]},"tier_conditions":[{"tier":"Api","surface":"audit_rights_dpa_residency","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"a6cc1419-bb46-4c4c-8077-8f11470fd0d7","quote":" Balance Technologies, Inc. is incorporated in the United States. However, all primary data storage (databases and document storage) is hosted within the European Economic Area (EU, Amsterdam region). Customer data at rest remains within the EEA.\n Limited transfers of personal data to the United States occur in the following circumstances:\n AI processing: when documents are analysed by our AI providers, data is transmitted to US-based API servers for processing. These providers operate under zero data retention (ZDR) agreements — no customer data is stored after the API call completes.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20Technologies%2C%20Inc.,the%20API%20call%20completes.","structural_citation":"Privacy Policy › “International Data Transfers”"}]},{"tier":"Api","surface":"privacy_data_use","verdict":"worsens","confidence":"high","citation_count":2,"citations":[{"finding_id":"91c30873-fdb1-44d7-a2d9-ad76280ef506","quote":" Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements:\n Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager.\n Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it.\n Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication.\n Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records).\n Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Keeping%20your%20data,with%20clear%20escalation%20steps.","structural_citation":"Privacy Policy › “Your Rights”"},{"finding_id":"123bd4cc-ec7c-42c0-beb6-117ece994b1e","quote":" This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages.\n Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption.\n 3.4 Communication Data\n When you interact with us via WhatsApp, Slack, or email, we process:\n Messages and queries sent to our AI assistant (Bea) and our team.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20This%20access%20is,(Bea)%20and%20our%20team.","structural_citation":"§ 3.3 (Email Data)"}]},{"tier":"Business","surface":"privacy_data_use","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"7ea972ca-b698-42e7-a5f3-89cb3a8efa57","quote":" Balance is a business-to-business (B2B) service. We provide financial reconciliation services to businesses, not to individual consumers. Our customers interact with us through business communication channels (WhatsApp, Slack, and email) rather than through a consumer-facing website or application. We do not knowingly collect personal data from children (individuals under 18). If we become aware that personal data of a child has been included in financial documents we process, we will notify the relevant customer.\n . Changes to This Policy","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20Balance%20is%20a,Changes%20to%20This%20Policy","structural_citation":"Privacy Policy › “Nature of Service”"}]},{"tier":"Standard","surface":"subprocessors_data_sharing","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"19eecd28-11eb-43d7-9b0d-7d5829d1ab9f","quote":" For all transfers to the United States, we ensure appropriate safeguards are in place, including:\n Standard Contractual Clauses (SCCs) approved by the European Commission.","source_url":"https://getbalance.ai/privacy","deep_link":"https://getbalance.ai/privacy#:~:text=%20For%20all%20transfers,by%20the%20European%20Commission.","structural_citation":"Privacy Policy › “International Data Transfers”"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Balance — AI policy risk findings","description":"Verified, cited policy findings for Balance across 13 risk surfaces.","url":"https://airinetwork.com/platform/balance","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"fully_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":4}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-bbaff204b41a17cd8960","text":" Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements:\n Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager.\n Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it.\n Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication.\n Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records).\n Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-9e80b0703f07905834bf","text":" Balance is a business-to-business (B2B) service. We provide financial reconciliation services to businesses, not to individual consumers. Our customers interact with us through business communication channels (WhatsApp, Slack, and email) rather than through a consumer-facing website or application. We do not knowingly collect personal data from children (individuals under 18). If we become aware that personal data of a child has been included in financial documents we process, we will notify the relevant customer.\n . Changes to This Policy","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-71dd29d058f29533209e","text":" Balance Technologies, Inc. (\"Balance\", \"we\", \"us\", or \"our\") operates the Balance financial reconciliation platform available at app.getbalance.ai (the \"Service\"). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service.\n Balance Technologies, Inc. is a Delaware corporation. Services are delivered through our group companies, including Balance Technologies Ltd (United Kingdom) and Balance Technologies ApS (Denmark). References to Balance in this policy include all group entities.\n We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679), and the Danish Data Protection Act (Databeskyttelsesloven).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-aa16d53d35fb8af11a18","text":" For personal data we collect about you as a user of our Service (such as your account information), Balance Technologies, Inc. is the Data Controller. Our contact details are:\n Balance Technologies, Inc.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-0f1834e21d4abcb76308","text":" Data Protection Contact: Gus Levinson, CTO.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-e7943c64f3601ca024ee","text":" Supplier and customer names, addresses, and identifiers.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-b173b818411031133737","text":" 3.3 Email Data\n Where a customer authorises Gmail or Google Workspace email integration, we access:\n Email body content (to identify and extract financial information).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-a13ddb528d696b43d34d","text":" Email metadata (subject lines, sender information, timestamps).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-5e9c9ed6b18d3fad58c4","text":" Email attachments (invoices and receipts for processing).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-827df9b25df5a49c0e55","text":" This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages.\n Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption.\n 3.4 Communication Data\n When you interact with us via WhatsApp, Slack, or email, we process:\n Messages and queries sent to our AI assistant (Bea) and our team.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-c9fe1450704befc1da84","text":" Slack user IDs and WhatsApp phone numbers used for communication.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-f69189274e199c82944b","text":" Our internal platform generates technical logs (error logs, performance data) which may incidentally contain personal data. These logs are used for debugging and service reliability only.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-f716d43166d2ee9b2f78","text":" We process personal data under the following lawful bases:\n Contract (Art. 6(1)(b)): Processing necessary for the performance of our contract with you, including providing the Service, managing your account, and processing financial data on your behalf. \n Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, including AI-assisted financial analysis, maintaining security of our systems, and improving our Service. We balance these interests against your rights and freedoms. \n Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-dfde288207cc621f0807","text":" 3.1 Customer and Contact Data\n When you engage Balance as a customer, we collect:\n Contact name and email address.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-800f7aa7391d2003a678","text":" 3.2 Financial Data (Processed on Behalf of Customers)\n As a Processor acting on our customers' instructions, we process:\n Bank account details and transaction records (synced from accounting software such as E-conomic, Xero, or QuickBooks).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/privacy-data-use-47a99b97fae76149e06a","text":" Receipts, invoices, and supporting documents (including PDFs and images).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/moderation-enforcement-163b8cd1c264380ae3a7","text":" Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal effects; our AI features assist but do not make final decisions without human review.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/data-retention-4bb96be9a3ecf3620d92","text":" We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:\n Account data: retained for the duration of your account and deleted within 90 days of account closure.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/data-retention-cd939bd4f2379712ccb9","text":" Financial documents and transaction data: retained as directed by the customer (Controller) under the DPA, or for a default period of 7 years for tax/regulatory compliance.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/data-retention-160246330ccea0cbb3ff","text":" AI processing logs: 12 months, with automated deletion.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-e7194808a3f07ecae988","text":" We do not sell personal data to third parties. We do not share personal data for advertising purposes.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-51ed9b9737fe54c3c545","text":" For all transfers to the United States, we ensure appropriate safeguards are in place, including:\n Standard Contractual Clauses (SCCs) approved by the European Commission.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-6de76e3603ab041ed9d3","text":" The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-a1168b1f9c4364e133b2","text":" Where applicable, participation in the EU-US Data Privacy Framework.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-aefdf08e674222f42591","text":" When we process financial data on behalf of our customers (such as bank transactions, receipts, and invoices belonging to their clients), we act as a Data Processor. In that case, our customer is the Data Controller, and processing is governed by our Data Processing Agreement (DPA).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-41265b40d7077b598610","text":" We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include:\n Cloud infrastructure providers (hosting, storage, databases).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-caef308f952a3644a565","text":" AI providers (document analysis, categorisation).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-c14dfeac9b01b52444b9","text":" Authentication providers (identity verification).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-4c1ff0ce286a0d4fa9ce","text":" Accounting software providers (integration partners such as E-conomic, Xero, and QuickBooks).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/subprocessors-data-sharing-9922d39c8a1839f14783","text":" Communication providers (Slack, email, WhatsApp for notifications).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-b6efe89d2e168c140b2a","text":" To exercise any of these rights, contact us at privacy@getbalance.ai. We will respond within one month as required by law. If we process your data as a Processor on behalf of one of our customers, we will direct your request to the relevant Controller.\n . How We Protect Your Data","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-f06fc3b30df7c3b0d8ae","text":" We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The effective date at the top of this policy indicates when it was last revised.\n . Complaints","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-94c7b8e0297eed1b7130","text":" If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:\n United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-0afe9c7fac69c0382571","text":" Denmark: Datatilsynet (Danish Data Protection Agency) — datatilsynet.dk","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-eee4a76668674b8ddb29","text":" We encourage you to contact us first at privacy@getbalance.ai so we can attempt to resolve your concern.\n . Contact Us","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-79f4cf25d45016af6657","text":" If you have questions about this Privacy Policy or our data protection practices:\n Email: privacy@getbalance.ai","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-1ad16ae5cee3da5b5835","text":" Balance Technologies, Inc. is incorporated in the United States. However, all primary data storage (databases and document storage) is hosted within the European Economic Area (EU, Amsterdam region). Customer data at rest remains within the EEA.\n Limited transfers of personal data to the United States occur in the following circumstances:\n AI processing: when documents are analysed by our AI providers, data is transmitted to US-based API servers for processing. These providers operate under zero data retention (ZDR) agreements — no customer data is stored after the API call completes.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-c996ca854cee17496ae4","text":" Authentication: Firebase Authentication (Google) processes login credentials, which may transit US infrastructure.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-65c02892118386a14352","text":" AI agent execution: our AI assistant (Bea) runs tasks in isolated cloud sandboxes provided by E2B (FoundryLabs, Inc.), which may be hosted in the United States. Sandboxes are ephemeral and destroyed after each task.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-a43c0d4bebe8b2d894ff","text":" Under the UK GDPR and EU GDPR, you have the following rights:\n Right of access: request a copy of the personal data we hold about you.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-e1518e28c5c9967dd5b4","text":" Right to rectification: request correction of inaccurate data.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-8c93e476e73cc5631fdf","text":" Right to erasure: request deletion of your data (subject to legal obligations).","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-2848c1ad0f013a4848b7","text":" Right to restrict processing: request limitation of how we use your data.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/balance/finding/audit-rights-dpa-residency-977f83b24a9e613caf8f","text":" Right to object: object to processing based on legitimate interests.","isBasedOn":"https://getbalance.ai/privacy","dateCreated":"2026-07-19T23:47:48.78508+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"}}],"variableMeasured":[{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Keeping your data secure is important to us. We take the following steps to protect your personal data in line with good practice and GDPR requirements:\n Step 1: Encrypt everything. All data is encrypted both in transit (TLS) and at rest. Third-party integration credentials are stored using Fernet/AES-128 symmetric encryption. Secrets and API keys are managed through a SOC 2 certified secrets manager.\n Step 2: Control access. Multi-factor authentication (MFA) is enforced on all infrastructure and administrative accounts. We use role-based access controls with the principle of least privilege, so only employees who need access to your data to do their job have it.\n Step 3: Isolate your data. Each customer’s data is logically separated. Our customers cannot access each other’s data. User identity is managed through Firebase Authentication.\n Step 4: Minimise what we keep. AI processing logs are automatically deleted on a rolling basis. When a customer’s contract ends, all their data is deleted within 90 days (except where we are legally required to retain financial records).\n Step 5: Monitor and improve. We regularly assess our security measures and update them as needed. We have a documented data breach response procedure with clear escalation steps.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Keeping%20your%20data,with%20clear%20escalation%20steps."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Balance is a business-to-business (B2B) service. We provide financial reconciliation services to businesses, not to individual consumers. Our customers interact with us through business communication channels (WhatsApp, Slack, and email) rather than through a consumer-facing website or application. We do not knowingly collect personal data from children (individuals under 18). If we become aware that personal data of a child has been included in financial documents we process, we will notify the relevant customer.\n . Changes to This Policy","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Balance%20is%20a,Changes%20to%20This%20Policy"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Balance Technologies, Inc. (\"Balance\", \"we\", \"us\", or \"our\") operates the Balance financial reconciliation platform available at app.getbalance.ai (the \"Service\"). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service.\n Balance Technologies, Inc. is a Delaware corporation. Services are delivered through our group companies, including Balance Technologies Ltd (United Kingdom) and Balance Technologies ApS (Denmark). References to Balance in this policy include all group entities.\n We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679), and the Danish Data Protection Act (Databeskyttelsesloven).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Introduction”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Balance%20Technologies%2C%20Inc.,Data%20Protection%20Act%20(Databeskyttelsesloven)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" For personal data we collect about you as a user of our Service (such as your account information), Balance Technologies, Inc. is the Data Controller. Our contact details are:\n Balance Technologies, Inc.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Controller”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20For%20personal%20data,are%3A%20Balance%20Technologies%2C%20Inc."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Data Protection Contact: Gus Levinson, CTO.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Controller”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Data%20Protection%20Contact%3A%20Gus%20Levinson%2C%20CTO."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Supplier and customer names, addresses, and identifiers.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2 (Financial Data (Processed on Behalf of Customers))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Supplier%20and%20customer%20names%2C%20addresses%2C%20and%20identifiers."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" 3.3 Email Data\n Where a customer authorises Gmail or Google Workspace email integration, we access:\n Email body content (to identify and extract financial information).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3 (Email Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%203.3%20Email%20Data,and%20extract%20financial%20information)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Email metadata (subject lines, sender information, timestamps).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3 (Email Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Email%20metadata%20(subject%20lines%2C%20sender%20information%2C%20timestamps)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Email attachments (invoices and receipts for processing).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3 (Email Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Email%20attachments%20(invoices%20and%20receipts%20for%20processing)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" This access is read-only , limited to the specific mailbox authorised, and used solely for the purpose of financial document extraction and processing. Balance has no ability to send, modify, or delete messages.\n Google API Disclosure: Balance's use of information received from the Gmail API adheres to Google's API Services User Data Policy, including the Limited Use requirements. We request only the https://www.googleapis.com/auth/gmail.readonly scope. This scope is read-only and is enforced by Google at the API level. Balance cannot send, modify, or delete email from your account, even in principle. Access is strictly limited to viewing email content, metadata, and attachments for the purpose of financial document extraction. We do not use Gmail data to develop, improve, or train generalised AI or machine learning models. Gmail data is only used to provide and improve the financial document extraction features of our Service. OAuth tokens are encrypted at rest using AES-128 symmetric encryption.\n 3.4 Communication Data\n When you interact with us via WhatsApp, Slack, or email, we process:\n Messages and queries sent to our AI assistant (Bea) and our team.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3 (Email Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20This%20access%20is,(Bea)%20and%20our%20team."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Slack user IDs and WhatsApp phone numbers used for communication.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.4 (Communication Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Slack%20user%20IDs,numbers%20used%20for%20communication."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Our internal platform generates technical logs (error logs, performance data) which may incidentally contain personal data. These logs are used for debugging and service reliability only.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.4 (Communication Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Our%20internal%20platform,and%20service%20reliability%20only."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We process personal data under the following lawful bases:\n Contract (Art. 6(1)(b)): Processing necessary for the performance of our contract with you, including providing the Service, managing your account, and processing financial data on your behalf. \n Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, including AI-assisted financial analysis, maintaining security of our systems, and improving our Service. We balance these interests against your rights and freedoms. \n Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal obligations, including financial record retention and regulatory compliance requirements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Lawful Basis for Processing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20process%20personal,and%20regulatory%20compliance%20requirements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" 3.1 Customer and Contact Data\n When you engage Balance as a customer, we collect:\n Contact name and email address.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.1 (Customer and Contact Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%203.1%20Customer%20and,name%20and%20email%20address."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" 3.2 Financial Data (Processed on Behalf of Customers)\n As a Processor acting on our customers' instructions, we process:\n Bank account details and transaction records (synced from accounting software such as E-conomic, Xero, or QuickBooks).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2 (Financial Data (Processed on Behalf of Customers))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%203.2%20Financial%20Data,E-conomic%2C%20Xero%2C%20or%20QuickBooks)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Receipts, invoices, and supporting documents (including PDFs and images).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2 (Financial Data (Processed on Behalf of Customers))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Receipts%2C%20invoices%2C%20and,(including%20PDFs%20and%20images)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"unknown","description":" Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce legal effects; our AI features assist but do not make final decisions without human review.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Rights%20related%20to,decisions%20without%20human%20review."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:\n Account data: retained for the duration of your account and deleted within 90 days of account closure.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20retain%20personal,days%20of%20account%20closure."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"unknown","description":" Financial documents and transaction data: retained as directed by the customer (Controller) under the DPA, or for a default period of 7 years for tax/regulatory compliance.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Financial%20documents%20and,years%20for%20tax%2Fregulatory%20compliance."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"unknown","description":" AI processing logs: 12 months, with automated deletion.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20AI%20processing%20logs%3A,months%2C%20with%20automated%20deletion."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" We do not sell personal data to third parties. We do not share personal data for advertising purposes.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20do%20not,data%20for%20advertising%20purposes."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" For all transfers to the United States, we ensure appropriate safeguards are in place, including:\n Standard Contractual Clauses (SCCs) approved by the European Commission.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20For%20all%20transfers,by%20the%20European%20Commission."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" The UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20The%20UK%20International,to%20the%20EU%20SCCs."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" Where applicable, participation in the EU-US Data Privacy Framework.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Where%20applicable%2C%20participation,EU-US%20Data%20Privacy%20Framework."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" When we process financial data on behalf of our customers (such as bank transactions, receipts, and invoices belonging to their clients), we act as a Data Processor. In that case, our customer is the Data Controller, and processing is governed by our Data Processing Agreement (DPA).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Controller”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20When%20we%20process,Data%20Processing%20Agreement%20(DPA)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" We share personal data with third-party service providers (sub-processors) who assist us in delivering the Service. A complete list of our sub-processors is maintained separately and available upon request. Key categories include:\n Cloud infrastructure providers (hosting, storage, databases).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20share%20personal,providers%20(hosting%2C%20storage%2C%20databases)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" AI providers (document analysis, categorisation).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20AI%20providers%20(document%20analysis%2C%20categorisation)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" Authentication providers (identity verification).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Authentication%20providers%20(identity%20verification)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" Accounting software providers (integration partners such as E-conomic, Xero, and QuickBooks).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Accounting%20software%20providers,E-conomic%2C%20Xero%2C%20and%20QuickBooks)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" Communication providers (Slack, email, WhatsApp for notifications).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Sub-processors and Data Sharing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Communication%20providers%20(Slack%2C%20email%2C%20WhatsApp%20for%20notifications)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" To exercise any of these rights, contact us at privacy@getbalance.ai. We will respond within one month as required by law. If we process your data as a Processor on behalf of one of our customers, we will direct your request to the relevant Controller.\n . How We Protect Your Data","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20To%20exercise%20any,We%20Protect%20Your%20Data"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The effective date at the top of this policy indicates when it was last revised.\n . Complaints","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20may%20update,last%20revised.%20.%20Complaints"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:\n United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20If%20you%20are,Office%20(ICO)%20%E2%80%94%20ico.org.uk"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Denmark: Datatilsynet (Danish Data Protection Agency) — datatilsynet.dk","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Denmark%3A%20Datatilsynet%20(Danish,Protection%20Agency)%20%E2%80%94%20datatilsynet.dk"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" We encourage you to contact us first at privacy@getbalance.ai so we can attempt to resolve your concern.\n . Contact Us","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20We%20encourage%20you,concern.%20.%20Contact%20Us"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" If you have questions about this Privacy Policy or our data protection practices:\n Email: privacy@getbalance.ai","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Nature of Service”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20If%20you%20have,protection%20practices%3A%20Email%3A%20privacy%40getbalance.ai"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Balance Technologies, Inc. is incorporated in the United States. However, all primary data storage (databases and document storage) is hosted within the European Economic Area (EU, Amsterdam region). Customer data at rest remains within the EEA.\n Limited transfers of personal data to the United States occur in the following circumstances:\n AI processing: when documents are analysed by our AI providers, data is transmitted to US-based API servers for processing. These providers operate under zero data retention (ZDR) agreements — no customer data is stored after the API call completes.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Balance%20Technologies%2C%20Inc.,the%20API%20call%20completes."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Authentication: Firebase Authentication (Google) processes login credentials, which may transit US infrastructure.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Authentication%3A%20Firebase%20Authentication,may%20transit%20US%20infrastructure."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" AI agent execution: our AI assistant (Bea) runs tasks in isolated cloud sandboxes provided by E2B (FoundryLabs, Inc.), which may be hosted in the United States. Sandboxes are ephemeral and destroyed after each task.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International Data Transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20AI%20agent%20execution%3A,destroyed%20after%20each%20task."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Under the UK GDPR and EU GDPR, you have the following rights:\n Right of access: request a copy of the personal data we hold about you.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Under%20the%20UK,we%20hold%20about%20you."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Right to rectification: request correction of inaccurate data.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20rectification%3A,correction%20of%20inaccurate%20data."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Right to erasure: request deletion of your data (subject to legal obligations).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20erasure%3A,(subject%20to%20legal%20obligations)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Right to restrict processing: request limitation of how we use your data.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20restrict,we%20use%20your%20data."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Right to object: object to processing based on legitimate interests.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"5c0f1b94f895bc2cbecaef3ddff0ce93d48ae37030758b90f8856f604fb0d378"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getbalance.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getbalance.ai/privacy#:~:text=%20Right%20to%20object%3A,based%20on%20legitimate%20interests."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:47:48.78508+00:00"}]}]}}