Privacy
In short, how we look after your data.
In short
What data we use
Your company's data, the invoices from SPV and email that you choose to connect, supplier data and payment information. For your account: each user's name, email and role.
Why we use it
- To show you your invoices and check them before payment
- To prepare the payments you approve
- To send you notifications about approvals and due dates
What we do not do
- We do not sell data
- We do not ask for your email password for Gmail and Outlook
- We do not hold your money, and we do not make payments without your approval
Website analytics
On finstream.ro we use PostHog for analytics only if you accept in the cookie banner. If you accept, PostHog records the pages you visit, the contact buttons you click and information your browser sends, such as device type, browser and approximate location, and keeps an anonymous identifier in your browser. We never send the name, email or message from the contact form. You can withdraw your consent anytime from "Cookie settings" in the page footer.
Your rights
You can ask at any time for a copy of your data, or for it to be corrected or deleted. Write to us at contact@finstream.ro.
Privacy Policy – FinStream
Last updated: 13 October 2026
This Privacy Policy describes how FINSTREAM SRL, registered at Aleea Iftimie Bârleanu, nr. 29, Romania ("FinStream", "we", "us") collects, uses, and protects personal data when users access or use the FinStream platform.
1. Data Controller
FINSTREAM SRL acts as the data controller for all personal data processed through the platform.
Contact: contact@finstream.ro
2. Scope
This Policy applies to all users of the FinStream application and website.
3. Categories of Data
We may process:
- Identification and contact data
- Company and invoicing data
- Payment-related metadata
- Technical and usage data
- Compliance and security data
4. Purposes and Legal Basis
Data is processed for:
- Contract performance (Art. 6(1)(b) GDPR)
- Legal compliance incl. PSD2 (Art. 6(1)(c) GDPR)
- Legitimate interests such as security and fraud prevention (Art. 6(1)(f) GDPR)
5. PSD2 & Open Banking
FinStream is not a licensed payment service provider. Payment initiation is performed by Smart Fintech, a licensed Payment Initiation Service Provider (PISP) under Directive (EU) 2015/2366 (PSD2). FinStream does not store banking credentials or execute payments.
6. Data Retention
Data is retained according to Romanian and EU fintech standards.
7. Data Transfers
All data is hosted and processed within the European Union.
8. User Rights
Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data.
9. Security
We apply technical and organizational measures aligned with ISO 27001 principles.
10. Cookies
We use cookies and similar technologies. For details, please see our Cookie Policy.
11. Complaints
Users may lodge complaints with ANSPDCP (www.dataprotection.ro).