Last updated: October 31, 2026
At Walletguide, data privacy and data security are really important to us and we want to make sure that you trust us with your information. This Privacy Policy (“Policy”) describes which information we gather, how we use it, how we share it with others, how we protect it and how you can access and control it.
If you have any questions or complaints about this Policy and our data protection processes, please get in touch with us at the contact mentioned below.
Definitions
“Walletguide”, “we”, “us”, “our” means Walletguide GmbH.
“Websites” means any website operated by Walletguide
“Services” means any product or other service that is operated by Walletguide.
“Visitors” means any individual that visits our Websites, but that we can’t identify yet.
“Leads” means any Visitor of our Websites that has provided us with identifiable information (e.g., by filling a form on a landing page).
“Users”, “Customers” means any individual who has an account with any Walletguide Services.
“GDPR” means the General Data Protection Regulation.
Beside these specific definitions we will use the meanings as defined in the GDPR regulation.
What information we collect about you
Information you provide to us
Information you provide through our Websites
In specific cases you provide data to us through our Websites. For example, you provide your contact details when you sign up for our newsletter, download a white paper from one of our landing pages, use our free statistics sections or when you fill a contact form.
Information you provide through our Services
You provide data to us when you use our Services. For example, you provide us with information, when you sign up for an account, when you add new users, when you add notes or comments or when you use our Services on an ongoing basis as part of the general features of the Services. For your financial data that you provide in regards to the Services we are the data processor and you are the data controller under the definition in the GDPR.
Information you provide through our support channels or direct communication
Through our support channels (the support form in the Services and direct email communication) you provide us with data about yourself and about the case for which you are contacting us.
Payment information
When setting up a paid account with our Services, you provide us and our payment partner with payment information that allows us to charge you on a recurring basis.
Information we collect automatically
Website visits
When you visit the Websites, our servers process technical connection data (IP address, requested pages, browser type) to deliver the pages and keep them secure. Our web analytics are self-hosted and cookie-less, and aggregate page views without identifying you: a returning visitor is recognized only within the same day, through a hash of IP address and browser that is not stored together with the IP address, and links lose every parameter except campaign tags (utm_*) before anything is sent. Country and device type are derived from the request; the IP address itself is not stored, and no third party receives this data. Legal basis: our legitimate interest in understanding how the Websites are used (Art. 6(1)(f) GDPR). We do not use advertising pixels or third-party tracking scripts on the Websites or in the Services.
Some blog posts embed videos, from YouTube (Google) or from our video hosting at videos.walletguide.com. When such a page loads, your browser connects to the video platform, which receives your IP address and browser information. YouTube videos use YouTube's privacy-enhanced mode (youtube-nocookie.com).
Cookies
Cookies are small pieces of text that a website stores in your web browser. We only set the cookies that are needed to sign you in to the Services and keep your session secure, and no third party sets cookies through the Services. An embedded video may set the video platform's own cookies when you play it. You can find more information in our cookie policy.
Information on how you use our Services
When you visit and interact with our Services we collect certain information in the background in order to optimize and improve the Services going forward. This includes for example things like device and connection information, log data, logins, page views, API calls (Application Programming Interface), usage of specific features and error logging.
With your account we also keep a record of when you use the Services: for each day, which 5-minute windows saw activity, through which channel (the web app, an MCP connector such as an AI assistant, the command-line tool or another app you connected, or an API key), in which wallet, and how many requests that day. For the weeks before we began keeping this record, we derived the same kind of record from our server logs, matching a request to your account only where your login session or the changes you made identify you, and from the dates on which you created or changed entries. The record holds no IP addresses, page contents or financial data. Only our team sees it, to understand how the Services are used and to improve them. Legal basis: our legitimate interest in understanding how the Services are used (Art. 6(1)(f) GDPR). It is deleted together with your account or the wallet.
Information from other sources
Other users of the services
Other users of our Services may provide us with data about you, when they add you as a user in order to use the Services going forward. You may also be mentioned by other users in notes and comments that were added or in support/sales conversations with our team.
Signing in with Google
If you sign in to the Services with your Google account, Google shares your name, email address and profile picture with us. Google shows you this in its sign-in dialog before you agree. We use this data to create your account and sign you in. Your profile picture is loaded from Google's servers when the Services show it.
Public information
In some of our processes we make use of public information that we can find about you, for example via LinkedIn or similar services where you provide your information publicly with intention.
How we use information we collect
We use the personal data you provided to us only for specific purposes of the corresponding processing activities and only where we have legal bases to do so (in compliance with the GDPR article 6). Once the purpose for a processing activity is not applicable anymore, we will delete the data accordingly (for specifics please read the section on this topic below). In the following sections we list the specific areas in which we use your personal data.
Providing of our Websites
We use information you delivered to us in order to provide our Websites, including customer support, log files, rendering fonts and to operate and maintain the Websites. We also use your data in order to personalize your experience.
Providing of our Services
We use information you gave to us in order to provide our Services, including for account creation, authentication, customer support, log files, rendering fonts and to operate and maintain the Services. We also use your data in order to personalize your experience.
Improving our Services
We want to make our Services the best in the market, that’s why we use your information in order to improve our Services on an ongoing basis. For example, we analyze error reports and our own server logs to find problems and to see which features are used.
Communicating with you about our Services
We use your contact information in order to communicate with you about our services. For example, we send you emails for confirmations, customer support, updates to the Services, technical notices and security measures.
Contact form
When you fill a contact form on our Websites, we use the data to get in touch with you to resolve your case.
Sign up
When you sign up for our Services on our Websites, we set up your account and may get in touch with you in order to help you to get the benefits out of our Services.
With your account we store where you came from: the domain of the website that referred you (for example "google.com", never the full address), campaign tags in the link you followed (utm_*), and the first page you visited on our Websites. Our Websites keep this in memory while you browse and hand it to the Services in the sign-up link; nothing is stored in your browser for it. We use it to learn which channels bring new customers. Legal basis: our legitimate interest in understanding how people find us (Art. 6(1)(f) GDPR).
Customer support
We use your information in order to provide you with the best customer support. For example, when you use the support form in our Services or write to us by email, we use the information you provided in order to resolve your case and guide you to the right resources and contacts within Walletguide.
Marketing and promoting our Services
We use your data in order to send promotional information to you that may be of specific interest to you. Our goal is to make the communicated information as meaningful as possible for you.
Newsletters
In case you signed up for our newsletters, we will send you regular email updates that are interesting in the scope of our company.
Lead quality
In order to only send you meaningful information we use your information to try to learn more about you over time and therefore consider a likelihood that you would be interested in our Services.
Cookies
We use cookies only to sign you in to the Services and to keep your session secure. Our web analytics on the Websites set no cookies. We do not use advertising pixels or remarketing, and we do not build advertising audiences from your behavior on our Websites or in the Services. You can find more information in our cookie policy.
Safety and security
We use information about you to increase the safety and security of our Websites and Services. For example for verifying your account, detecting fraudulent activities and anything else that would make our Services more secure.
AI assistants you connect
You can connect Walletguide to an AI assistant or another app that supports the Model Context Protocol (MCP), for example Claude, ChatGPT or Cursor, through our hosted MCP server, whose address is listed in our developer documentation. This section covers what happens with your data when you do: what the assistant receives, what we receive and keep, who else is involved, and how you end it.
You set up the connection yourself. You add Walletguide in the assistant, sign in to Walletguide and approve the access on our consent screen, which lists what the assistant may do:
- Read your wallets, transactions and reports. Always included.
- Add and change data in your wallets (create, update and delete entries). Only if you tick it.
- Change wallet settings and manage bank connections: rename a wallet, change its currency or image, give you a link to the bank connection dialog and refresh connected banks. Only if the app asks for it and you tick it. Inviting people, changing roles, creating or revoking API keys and deleting a wallet still stay with you: the assistant can only ask, and nothing changes until you approve each request in Walletguide.
- Create wallets for you, with you as the owner, sample wallets included. Only if the app asks for it and you tick it. Your first wallet starts your free trial, as it does in the app.
Whatever you approve, the assistant only reaches the wallets you have access to, and only within your own permissions there. It never sees your bank credentials: you sign in to your bank yourself, in Walletguide's bank connection dialog.
When you approve the connection, the assistant receives your name and email address from your Walletguide account (and your profile picture, if your account has one), so it can show which account is connected. After that it receives what it asks for through our tools, when you ask it something. Depending on your question, that can be:
- wallet details and settings, members and invitations, including their names, email addresses and roles
- assets and their balances, including securities and crypto holdings, and transactions with amount, date, description, counterparty, category, tags and notes
- categories, tags and merchants
- plans and scenarios
- figures we calculate, such as net worth, income and expenses, cash flow or portfolio performance
- comments, notifications and uploaded files such as receipts, statements or contract notes, with what we read from them
- the status of your bank connections
Every tool, its parameters and what it returns are listed in our MCP tools reference.
We do not receive your conversation with the assistant, only the requests it sends to Walletguide: the tool it calls and the parameters, such as a wallet, a date range, a search term or, with write access, the values to save. Parameters can contain text from your conversation. We use a request only to answer it or, with write access, to make the change in your wallet, where it is stored like a change made in the app. The assistant may add technical details to a request, such as your language or approximate location. We do not use or store them.
We do not keep a separate log of the tools the assistant calls or of what it asks or receives. In the record of when you use the Services, described under "Information on how you use our Services" above, we note which app made requests on which day, in which wallet, and how many. Our servers also record technical connection data for each request (IP address, time, the address of our MCP server, the response status and how long it took), and we log errors and unusually slow requests, which can name the tool or quote part of the request. We use this data only to run the Services, investigate errors, security incidents and misuse, and, for the record of use, to improve the Services. We do not use any of it for advertising or to train AI models, and we do not sell it.
The provider of the assistant (for example Anthropic for Claude or OpenAI for ChatGPT) receives the data on your instruction. It does not act on our behalf and is not one of our sub-processors. You choose the assistant, and its provider processes the data under your agreement with it and its privacy terms, possibly outside the EU. Those terms and its settings tell you how long it keeps your conversations and whether it uses them for training. On our side, the requests are handled by the same infrastructure as the rest of the Services, hosted in the EU (see our sub-processor list).
How long we keep it:
- the technical connection data and the logs of failed or slow requests: 30 days, then they are deleted automatically
- the record of when you use the Services: until your account or the wallet is deleted
- your approval and the access tokens: until you disconnect the app. An access token is valid for one hour; the assistant renews it with a refresh token. Each renewal replaces the refresh token with a new one, and a refresh token expires 30 days after it was issued, so a connection the assistant has not renewed for 30 days stops working.
- changes the assistant made: they are part of your wallet data and kept like any other change, as described under "How long we store your information" below
You can see and disconnect every connected app under User settings → Connected apps in the Services. Disconnecting takes effect immediately, deletes your approval and all tokens of that app, and stops further access. It does not undo changes the assistant already made or remove data it already received; for that, use the assistant's own settings or contact its provider. To access or delete the data we keep about your connected apps, email support@walletguide.com.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) for the connection and for answering the requests, and our legitimate interest in secure Services (Art. 6(1)(f) GDPR) for the connection data and those logs.
How we share information we collect
Service providers and third parties
We work with third-party service providers for various tasks within our organization, including billing, marketing, customer support, analysis, accounting and others. If we transfer your personal data to a service provider in order to fulfill a task, we will make sure that the service provider only processes the data based on our instructions and by guaranteeing the same safeguards as we do. On top of that we guarantee that we have signed a data processing agreement with every service provider that makes sure that the partner is bound to the strict rules under the GDPR law. Those that take part in running the Websites and Services are published with purpose, location and transfer safeguards in our sub-processor list. Providers of tools we only use internally, such as our own email and collaboration environment, are not part of that list.
Bank connections work differently. Connecting a bank account is optional; you can also add accounts manually and import transactions from CSV files. If you do connect one, you authorize the bank connectivity provider yourself, in its own window and under its own terms and privacy policy: finAPI (Germany) for banks in Europe, Plaid (US) for banks in the United States and Canada. The provider retrieves the data from your bank and passes it to us on your instruction. It does so as an independent controller, not on our behalf. We only send it a pseudonymous technical ID so it can assign the connection to your account. Both providers are listed in a separate section of the sub-processor list. AI assistants you connect yourself also receive data on your instruction: the data you request through them, as described under "AI assistants you connect" above.
Change of ownership
We may share information under this Policy in the case of any merger, sale, financing or acquisition of a part or the whole of any Walletguide business. We will notify you accordingly in case this situation should arise. Any data transfer in this regard is guaranteed to be in line with the GDPR regulation.
Law enforcement and compliance
We will share your information with a third-party (including law enforcement authorities) if we believe that sharing is necessary to comply with any applicable law or governmental requests.
How we secure information we collect
We use robust and state-of-the-art technical and organizational measures to secure the data that we have about you. We are reviewing our data protection processes regularly in order to make sure that we protect your data in the best possible way. If we use sub contractors and service providers to fulfill a specific task based on your data, we will make sure that the partner has similar state-of-the-art data protection processes in place.
How long we store your information
We store your data only for as long as we need access to it in order to fulfill the purpose of the specific data processing activity. As the data retention period is different from use case to use case we have created a separate document with all our processing activities, in which you can find the exact period for each of the processing activities that we perform. On top of that and where possible we have applied a general rule inside Walletguide that all personal data should be deleted or anonymized if you haven’t been using our Websites and Services for more than 9 months. Exceptions to these rules only apply if there are technical limitations to guarantee this or where specific laws expect from us that we store the data for a longer time (e.g., requirements from tax authorities for storing documents).
How to access and control your information
We respect that your personal data is yours and therefore give you full control to decide what happens with your personal data.
Access, correction and deletion
You have the right to request a copy of your information, to object to our use of it, to request the deletion of your information or to get it in a machine-readable electronic format. Many of these activities you can do yourself within our Services by navigating to the account settings page. For any other request please send us an email to support@walletguide.com and we will do our best to give you a meaningful response as soon as possible after we have verified your identity. In some cases we may be limited in providing information to you, if fulfilling your request would reveal information about any other individual or if we are permitted by law or legitimate interest to keep it. Should you at any point believe that we didn’t respect your data privacy rights, you can complain with the corresponding authorities.
Opting out for specific use cases
You may opt-out of specific processing activities by using different methods, such as
- Clicking on unsubscribe links in marketing email that we sent
- Changing your email notification settings in the Services
How we transfer information internationally
In many cases we use sub contractors, service providers and Walletguide affiliates that are based outside of the European Union. Should this be the case, we will always make sure that safeguards apply so that the corresponding data transfer is handled in line with the GDPR regulations. For sub processors in the US we rely on signed data processing agreements that make sure that your data is secure. The country and the safeguard per provider are stated in the sub-processor list.
Other important privacy information
Minors and children
The Websites and Services are not directed to individuals under the age of 16 and we do not knowingly collect any information from individuals under 16. If we become aware of such data, we will delete the personal information. If you become aware that someone under 16 is using our Websites and Services or has provided us with personal information, please get in touch with us at the contact mentioned below.
Changes to this policy
Walletguide reserves the right to change this Privacy Policy. We will provide notification of material changes through the company’s website at least 30 days prior to the change taking effect. Every change is listed on our change history page.
How to contact us
Questions regarding this policy or data privacy in general can be directed to the following contacts.
Responsible for data privacy and security at Walletguide
Walletguide GmbH
RĂĽggeberger Str. 94
58256 Ennepetal
Germany
Represented by Alexander Peiniger CEO and Managing Director support@walletguide.com