Privacy policy

#1. Who we are and what this policy covers

Qube SAS operates Contamos and is the controller of the personal data described here: we decide why it is collected and what is done with it. Qube SAS is established in Uruguay.

This policy explains what we hold about you, why we are allowed to hold it, who else can see it, where it goes, how long it stays and what you can ask us to do with it. It covers the Contamos website, the application, and the MCP server that AI assistants connect to. Sites we link to run under their own policies.

Write to hello@contamos.xyz with any question about this policy, to exercise any of the rights it describes, or to ask for our postal address.

#2. The data we collect

Account data. When you sign in, our authentication provider passes us your name, your email address and, where your provider offers one, your profile picture. We also keep the language, the theme and the team you last chose.

Ledger data. The teams, accounts, transactions, transfers, transfer rates, recurring rules, budgets, categories and tags you record, each with the date it was recorded and the member who recorded it.

Activity data. Every team keeps a log of the changes made in it — what changed, when, and by whom — so its members can see how the ledger reached the state it is in.

Billing data. If your team subscribes to Pro we keep the status, plan, price and renewal date of the subscription, and the identifiers our payment provider gives us for it. We never receive or store your card number.

Support data. What you write to us and what we write back.

Technical data. What your browser sends with every request — IP address, user agent, language and the page asked for — recorded in our server logs, together with the cookies described further down.

Usage data. As you browse the website and use the app, Google Analytics records the pages you open, how you reached us (including the ad or campaign that brought you, if any), your device and browser, your approximate location worked out from your IP address, and a few milestones: signing up, creating a team, sending or accepting an invitation, opening the checkout and paying for Pro. It is tied to a random identifier, not to your name or email address, and it never includes anything you record in your ledger.

Assistant data. If you connect an AI assistant, we keep the record of the access you granted it, and the activity log of each team notes which changes the assistant made.

We do not ask you for special categories of data such as health, biometric or political data, and you should not record any. Contamos does not connect to your bank, so we never receive your banking credentials or your statements.

#3. Why we use it, and on what legal basis

To provide the service: creating your account, running your teams, storing and showing your ledger, and sending the service messages the product depends on. This is how we perform the contract you enter into by accepting our terms.

To take payment for Pro, which rests on that same contract, and to keep the invoices and accounting records that follow from it, which rests on a legal obligation.

To keep the service secure, available and free of abuse, to answer your support requests, and to understand which features are used so that we can improve them. These rest on our legitimate interest in running a secure service worth paying for, which is why they use the least data that will do the job and never to build a profile of you.

To learn how people find Contamos and whether our advertising works, through the usage data described above. This rests on our legitimate interest in knowing which of our efforts bring people to the service, and you can opt out of it at any time, as the cookies section explains. In the European Economic Area, the United Kingdom and Switzerland, where the law asks for consent before analytics cookies are set, none are set, and Google receives only measurement that carries no cookie.

Where the law requires your consent for something, we ask for it before we do it and you can withdraw it at any time, without affecting what was already done under it.

#4. What we never do with it

We do not sell your personal data, we do not share it with data brokers, we do not use it to show you ads on other websites or to build an advertising profile of you, and we do not use it for any purpose unrelated to running and growing Contamos. The only data that reaches an advertising platform is the usage data described above, which tells us whether our own ads work; it never includes anything you record.

We do not profile you, and no decision with a legal or similarly significant effect on you is taken about you by automated means.

We do not use what you record to train machine learning models.

#5. What the rest of your team sees

Contamos is a shared ledger. Every member of a team sees everything recorded in that team, the name of whoever recorded each entry, and the team's activity log. That is the purpose of the product rather than a side effect of it, so invite only the people you mean to share a ledger with.

Your name and your email address are visible to the members of the teams you belong to and to the people you invite.

A team owner can invite and remove members, change their roles, and delete the team along with everything recorded in it. Removing a member ends their access; it does not erase the entries they made, which the members who stay still need in order to read their own ledger.

#6. AI assistants you connect

Contamos runs an MCP server, the standard way AI assistants such as Claude and ChatGPT connect to other services. Connecting one is your choice, and nothing reaches any assistant until you do.

To connect an assistant you sign in to Contamos from it and approve its access. From then on it acts as you: it can read and change what you can read and change in the app, on every team you belong to, within each team's plan. Every change it makes shows in the team's activity log with the assistant's name.

What the assistant reads from Contamos, such as balances, transactions and reports, goes to the company that provides the assistant, which handles it under its own terms and privacy policy rather than ours. That company is not one of our providers, and we do not control what it keeps or how it uses it, so check its settings, including whether it uses your conversations to train its models. We never receive your conversation with the assistant, only the requests it makes to Contamos.

You can see every assistant connected to your account, and disconnect any of them, from AI assistants in the app. Disconnecting stops it at once, on every team.

#7. The providers who handle data for us

A small number of providers run parts of Contamos on our behalf. Each of them acts on our instructions under a written data processing agreement, and each receives only the data its part requires.

WorkOS, Inc. runs sign-in and holds the identity behind your account. Paddle.com Market Ltd is the merchant of record for Pro: it collects your payment details directly, decides for itself what it does with them under its own privacy notice, and never passes us your card number. Our hosting provider stores the application's database, files and logs, and our email provider delivers the messages the service sends you.

Google LLC provides Google Analytics, which records the usage data described above, and Google Ads, which uses the milestones in it to tell us whether our ads work. For analytics Google acts on our behalf; for measuring ads it also acts as an independent controller under its own privacy policy. We have turned off advertising personalisation and Google signals for Contamos, so what Google receives from us is not used to target ads at you.

Beyond them we disclose personal data only where the law obliges us to, where it is needed to establish or defend a legal claim, or to the buyer of the business if Contamos is ever sold, in which case this policy keeps applying until you are told otherwise and given the chance to object.

#8. Data that leaves Uruguay

Our providers are established outside Uruguay, so running Contamos means transferring your data abroad. We make those transfers only to countries recognised as offering an adequate level of protection, or under the standard contractual clauses approved for the purpose, so that the protection described here travels with the data. Write to hello@contamos.xyz for a copy of the safeguards that apply.

#9. How long we keep it

Your account data, your ledger and your teams' activity logs are kept for as long as your account exists.

Server logs are kept for up to ninety days, backups for up to thirty days after the data in them is deleted, support correspondence for up to two years after the request is closed, and usage data in Google Analytics for fourteen months.

Invoices and the accounting records attached to them are kept for as long as the tax law of Uruguay requires them to be, and are used for nothing else in the meantime.

#10. How we protect it

Contamos is served only over encrypted connections, and the data behind it sits on managed infrastructure with encryption at rest, restricted administrative access and regular backups. Only the people who need production data in order to operate the service can reach it.

No service can promise perfect security. If a breach happens that is likely to put your rights at risk, we will notify the competent authority and, where the law requires it, you, without undue delay.

#11. Deleting your account

You can delete your account whenever you like, from the account screen. Doing so removes your profile, ends every session on every device, deletes the identity our authentication provider holds for you, and deletes outright every team of which you were the only member, with everything recorded in it.

Teams you share with other people survive, because they are their ledgers too. Your membership goes, and the entries you made stop being attributed to you, but their amounts, dates and descriptions remain so that the ledger still balances for the members who stay.

Deletion takes effect immediately and cannot be undone. Backups taken before it are overwritten on the cycle described above. Usage data in Google Analytics is not linked to your account, so it expires on its own fourteen-month cycle.

#12. Your rights

On the conditions set by the data protection law that applies to you, you can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict or stop a particular use of it, object to any use that rests on our legitimate interests, and receive what you gave us in a portable, machine-readable form.

Much of this you can do yourself and at once: analytics stops as soon as you block its cookies, your profile is editable from the account screen, your transactions export to CSV from the app at any time with the filters you have on, and your account deletes from that same screen.

For anything else, write to hello@contamos.xyz. We answer within thirty days and tell you if we need longer. We may ask you to confirm your identity first, so that nobody can exercise your rights in your name. Exercising them costs nothing.

If our answer does not satisfy you, you can complain to the data protection authority of Uruguay or of the country you live in.

#13. Children

Contamos is for people aged 13 and over, and we do not knowingly collect personal data from anyone younger. Between 13 and the age of majority where you live, a parent or guardian has to agree to our terms with you, and they can exercise the rights described above on your behalf.

If you believe a child under 13 has given us personal data, write to hello@contamos.xyz and we will delete it.

#14. Cookies

Contamos sets the cookies it cannot work without: one that keeps you signed in, one that protects forms against cross-site request forgery, and a few that remember how you left the interface, namely the theme, the language and whether the sidebar is open. Our hosting provider's network also sets a short-lived cookie that tells people apart from bots. None of these need your consent.

Outside the European Economic Area, the United Kingdom and Switzerland, Google Analytics also sets its own cookies, named _ga and _ga_ followed by an identifier, which hold the random identifier described above for up to two years. When we advertise on Google, one more cookie, _gcl_au, remembers which ad brought you here for up to ninety days. Inside those regions none of them are set.

You can opt out of analytics wherever you are: block cookies for contamos.xyz in your browser, use a content blocker, or install Google's opt-out add-on. Contamos works exactly the same without it.

When you open the checkout, Paddle's payment page sets its own cookies under Paddle's policy.

There are no cookies that show you ads, and Contamos does not follow you onto other websites.

#15. Changes to this policy

We update this policy when the service or the law behind it changes, and the date at the top of the page always says when we last did. If a change materially affects your rights, we will tell you by email or in the app before it takes effect, so that you can object or close your account first.