Privacy Policy

01Who we are

PazaWise is an AI CFO for Nordic and European businesses, operated by Depaza AB. For the personal data described in this policy, Depaza AB is the data controller. You can reach our privacy team at any time at privacy@pazawise.com.

02What data we collect

We collect only what we need to run PazaWise, connect it to your accounting system and bill it correctly:

• Account data: your name, work email and, if you set one, a password, together with the company profile you create.
• Financial and accounting data: ledger entries, invoices, bank transactions, VAT records and reports that we read from the accounting systems and bank feeds you connect — E-conomic, Dinero, Xero, QuickBooks and PSD2 bank feeds.
• Content you submit: the questions you ask in plain English or Danish, and documents such as supplier invoices and receipts you upload for automatic reading, categorisation and posting.
• Usage and technical data: the queries, simulations and invoice volumes we meter for your plan, plus standard request logs (IP address, timestamp, browser) needed for security and abuse prevention.
• Billing data: handled by our payment processor. We store your plan, status and the minimum needed to issue invoices — we never see or store full card numbers.

03Controller and processor roles

For your account, login and billing data, Depaza AB acts as the data controller. For the financial data inside your connected accounting systems — which may include personal data about your own customers, suppliers and employees — you remain the controller and PazaWise acts as your data processor, handling that data only on your documented instructions.

A Data Processing Agreement (DPA) governs this relationship and is available on request.

04How we use your data

We process your data to provide the service you asked for — answering your finance questions, automating invoices, running simulations, sending alerts and generating reports — and to authenticate you, meter usage, bill you, keep the service secure and comply with legal obligations. The legal bases are performance of our contract with you, our legitimate interest in running a secure and reliable service, your consent where required, and compliance with legal obligations such as bookkeeping law.

05Connecting your accounting systems and bank feeds

When you connect E-conomic, Dinero, Xero, QuickBooks or a PSD2 bank feed, you authorise PazaWise to read the financial data needed to answer your questions and automate your bookkeeping. We request the narrowest access that makes each feature work, and invoice postings are prepared for your review rather than filed silently. You can disconnect any integration at any time from your settings, which stops further syncing.

06How AI processes your data

Your questions, documents and financial data are processed by AI models to generate answers, categorise transactions, run what-if simulations and draft reports. These models run exclusively on European infrastructure — your content is never sent to providers outside the EU and is never sold.

We do not use your financial data to train shared models without your explicit agreement; enterprise arrangements are excluded by default. AI output is decision support: postings, figures and reports are always yours to review before you rely on them.

07Where your data lives

Everything that runs PazaWise — application servers, databases and the AI models — is hosted within the European Union. We do not transfer your content to third countries for processing. Where a strictly necessary supporting service, such as payment processing or transactional email, involves a provider outside the EU, we use providers that offer EU data residency and appropriate safeguards such as Standard Contractual Clauses. Our current list of sub-processors is available on request and kept up to date.

08How we keep your data secure

We protect your data with encryption in transit (TLS 1.3) and at rest (AES-256), strict access controls, network isolation and continuous monitoring. Access to customer data by our staff is limited to what is necessary to operate and support the service, and every such access is logged.

09Retention

We keep account and financial data for as long as your account is active, so PazaWise works as you expect. You can delete uploaded documents and disconnect integrations at any time, and you can ask us to delete your account and associated personal data. We retain the minimum billing and bookkeeping records required by applicable law.

10Cookies

We use a small number of strictly necessary cookies: a session cookie to keep you logged in and a cookie that remembers your language choice. We do not use advertising or cross-site tracking cookies.

11Your rights

Under the GDPR you have the right to access, correct, export, restrict and delete your personal data, and to object to certain processing. To exercise any of these, email us and we will respond within the statutory timeframe. You also have the right to lodge a complaint with your local data protection authority (in Denmark, Datatilsynet).

12Changes to this policy

If we make material changes we will update this page and the "last updated" date above. Continued use of PazaWise after a change means you accept the updated policy.

13A note on this template

PazaWise is a demonstration product, and this policy is a template written for illustration. It is not legal advice — before you rely on it, have it reviewed against your specific processing activities and local requirements.