Privacy policy

Data controller

Paer ApS (CVR 46 41 35 63), c/o Antler, Frederiksholms Kanal 30, 1220 København K, Denmark, phone +45 35 15 35 53, is the data controller for personal data processed in the Paer FX cost audit tool.

What the tool does

The tool compares the exchange rates and fees on your cross-border payments with mid-market rates, so you can see what your bank charges. You can either upload a bank statement file or connect a bank account through open banking.

Data we process

• Uploaded statements: files are read in your browser. The file contents are not sent to or stored on our servers. Exception: if you use a personal invite link from us, the parsed results are saved under your link so you can add more data over time, and files you explicitly choose to send to us are stored so we can read them manually.
• Open banking: with your consent, given at your bank, we fetch account details (such as account name and IBAN) and up to 12 months of transactions through our provider Enable Banking Oy. Access is read-only and expires after 24 hours. Transactions pass through our server to be returned to your browser and are not stored by us.
• Audit results are kept in your browser session and are removed when you close the tab. Your settings (such as Paer pricing assumptions) are kept in your browser's local storage. With an invite link, your combined results are stored until you share them with us or we delete the invite.
• Payment dates and currencies are used to look up historical exchange rates from Open Exchange Rates. No names, amounts or account details are sent for this.
• Owner accounts: if you sign in as an administrator, we store your email address and login details.
• Standard technical data, such as IP address and browser type, may be logged by our hosting provider for security and operation.

Purpose and legal basis

We process the data to produce the audit you request (GDPR article 6(1)(b), steps at your request prior to entering into a contract) and, for technical logs, our legitimate interest in running a secure service (article 6(1)(f)).

Processors

• Enable Banking Oy: open banking connection
• Open Exchange Rates: historical exchange rates
• Lovable and its hosting providers: hosting, authentication and database

Retention

We do not keep statement contents or fetched transactions from the open audit tool. Data submitted through an invite link (parsed results and files you send us) is kept until the invite is deleted or you ask us to delete it. Owner account data is kept while the account exists.

Your rights

You have the right to access, correct, delete, restrict and object to the processing of your personal data, and to data portability. To use these rights, email fredrik@paer.dk, call +45 35 15 35 53 or write to us at the address above. You can complain to Datatilsynet (datatilsynet.dk).