API Boutique Privacy Policy

Effective Date: 16 May 2025

This Privacy Policy explains how Automation Boutique B.V. ("we," "us," or "our") collects, uses, stores, and protects your personal and financial data when you use the API Boutique platform ("Service").

1. Who We Are

Automation Boutique B.V. is the company behind API Boutique, a SaaS platform that helps companies connect financial systems such as banks and accounting software to tools like Excel and Power BI.

2. Information We Collect

We collect and process the following types of information:

  • Account Information: Name, email address, organization, and login credentials
  • Connection Data: Permissions, authorizations, and configurations required to establish links to third-party financial systems
  • Financial Data: Bank account balances, transactions, and metadata, retrieved upon your consent
  • Usage Data: Logs of feature usage, login times, error reports, and system activity

We do not collect sensitive personal data unless required for authentication by a third-party provider.

3. How We Use Your Information

We use your data to:

  • Provide and maintain the Service
  • Set up and manage integrations with your connected systems
  • Trigger and deliver Smart Notifications as configured by you
  • Monitor service performance and improve the platform
  • Provide customer support
  • Meet legal or compliance requirements where applicable

We do not use your data for advertising or profiling purposes.

4. Legal Basis for Processing

We process personal data on the following legal bases:

  • Your explicit consent when initiating a connection
  • Contractual necessity to provide the Service
  • Legitimate interests in improving and securing the Service
  • Compliance with legal obligations

5. Sharing of Data

We do not sell, trade, or rent your data. We may share your data only with:

  • Third-party services explicitly authorized by you
  • Subprocessors who assist in delivering the Service (e.g., hosting providers), under strict confidentiality agreements
  • Legal authorities if required by applicable law

6. Data Retention

We retain your data as long as necessary to provide the Service or as required by law. If your account is terminated, we will delete your data within 30 days unless legally obligated to retain it longer.

7. Data Security

We apply robust security measures to protect your data, including:

  • Encrypted transmission (TLS)
  • Encrypted storage
  • Role-based access controls
  • Regular security audits

You are responsible for maintaining secure credentials and ensuring that any connected third-party tool (e.g., Excel, Power BI) is properly configured and secure.

8. International Transfers

All data is stored in the European Economic Area (EEA). If data must be transferred outside the EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccuracies in your personal data
  • Withdraw consent at any time (note: this may disable certain functionality)
  • Request deletion of your personal data
  • File a complaint with a data protection authority

To exercise these rights, contact us using the details below.

10. Cookies and Tracking

We use cookies strictly for functionality and platform performance. No tracking cookies or third-party analytics are used without your consent.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in laws or platform features. Material changes will be communicated via the Service or email.

12. Contact

If you have any questions or wish to exercise your rights, contact us at:

  • Automation Boutique B.V.
  • Stadsplateau 27
  • 3521 AZ, Utrecht
  • the Netherlands
info@automationboutique.com

Thank you for trusting API Boutique.