Privacy Policy

This Privacy Policy explains how Armologic Ltd (“Sofinos”, “we”, “us”), the data controller, collects, uses and protects your personal data when you use Sofinos. We are registered in United Kingdom (company number 15518194), registered office 86-90 Paul Street, London, EC2A 4NE, United Kingdom.

1. Data we collect

• Account data — name, email, password (hashed), tax residency and region.
• Financial data you provide or connect — transactions, invoices, income and expense figures, and bank account details you link through our aggregation partners.
• Usage & device data — log data, IP address and basic analytics needed to run and secure the Service.
• Billing data — handled by our payment provider (see below); we receive subscription status and limited transaction metadata, not full card numbers.

2. How and why we use it

We process your data to provide the Service (calculating tax estimates, tax pot, reports and invoicing), to operate your account and subscription, to secure the Service and prevent fraud, to provide support, and to comply with legal obligations.

3. Legal bases (UK GDPR)

We rely on: performance of a contract (to deliver the Service you signed up for); legitimate interests (to secure and improve the Service); legal obligation (e.g. accounting records); and consent where required (e.g. certain communications), which you can withdraw at any time.

4. Sharing your data

We share personal data only with service providers who help us run Sofinos, under contract and only as needed, including:

• Paddle.com Market Limited (Paddle) — our merchant of record, to process subscription payments and tax.
• Bank data aggregators — where you choose to connect a bank account.
• Hosting and infrastructure providers — to run the Service securely.

We do not sell your personal data.

5. International transfers

Where data is transferred outside the UK/EEA, we use appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

6. Data retention & security

We keep your data for as long as your account is active and as required for legal and accounting purposes, then delete or anonymise it. We protect data with encryption in transit and at rest, hashed credentials, access controls and audit logging.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to processing, and to data portability. You can export your data and delete your account from within the app, or contact us. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

We use only essential cookies needed to sign you in and keep the Service secure. We do not use advertising cookies.

9. Children

Sofinos is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be notified through the Service or by email.

11. Contact

For any privacy request, email support@armologic.com or write to Armologic Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.