Privacy policy
Working version: 0.1 · No effective date
1. Controller and scope
BelieveBig Corp., a company incorporated in Illinois, United States, operates BlexSys Personal. This policy describes the intended handling of personal information in an international personal-finance organization service, with a focus on Latin America. The final version must identify the business mailing address and the countries where the service is actually offered.
2. Categories of information
We may process account details provided by users, including names, email addresses, language preferences and protected credentials. Users may record financial data such as income, expenses, budgets, wallets, debts, commitments and receipts. Security records may include access dates, IP addresses, session identifiers, administrative events and error information. The service should not request confidential banking information that is unnecessary for its functionality.
3. Purposes and legal grounds
Information is used to create accounts, authenticate users, present calculations and reports, retain user-requested records, answer inquiries and prevent improper access. Legal grounds vary by jurisdiction and may include contract performance, legitimate interests, legal duties or consent where required. Before final publication, the legal basis for each activity and jurisdiction must be documented.
4. Financial data and automated decisions
The platform is a recordkeeping and organization tool; its calculations should not be presented as banking decisions or individualized financial advice. This release adds no artificial-intelligence functions that train on users’ records. Any future addition that materially changes processing requires new assessment and appropriate disclosure.
5. Service providers and international transfers
Hosting, email and backup providers may participate in operations. The actual vendor list, their locations, functions and safeguards for international transfers must be checked before adopting this policy. A generic clause cannot replace measures required under applicable data-protection laws.
6. Retention periods
Operational data should be retained only as needed to deliver the service and meet legitimate or legal requirements; security records need a separate retention schedule. No fixed number of days or years is stated here because actual database, backup and deletion behavior must first be validated. Backups may remain temporarily under a documented recovery lifecycle.
7. Rights and requests
Depending on applicable law, users may have rights to access, correct, erase, object to, restrict or port their information. Requests can be sent to legal@blexsys.com. To protect households, identity and permissions must be verified before data is disclosed or changed; legal exceptions and retention duties will be assessed individually.
8. Security and incidents
Authentication, session, permission and server protection controls are applied, but no system can guarantee absolute freedom from incidents. Breach notifications must follow the requirements of relevant jurisdictions and the verified circumstances. No independent certification is claimed unless actually obtained.
9. Children and minors
Before allowing child accounts, age thresholds, guardian authorization and treatment of minors’ data must be determined for each target market. This text does not claim that age checks or parental-consent tools already exist.
10. Changes and contact
The final policy must state an effective date, version and how material changes are communicated. Legal and privacy inquiries go to legal@blexsys.com. Displaying this draft does not substitute acceptance of a final policy.