Back to Home

    Privacy Policy

    Last updated: October 27, 2026

    1. Basic information

    1. The controller of personal data processed via the FIZEN.eu website ("Website") is FIZEN spółka z ograniczoną odpowiedzialnością (hereinafter: "FIZEN") with its registered office in Łódź, ul. Narutowicza 40/1, 91-135 Łódź, Poland, entered into the National Court Register under the number KRS 0000900414, REGON: 388908954, VAT: PL7252309077, electronic contact address: contact@fizen.com, website https://fizen.eu.
    2. FIZEN cares about the security of the personal data provided to us. This data is protected and secured against unauthorized access.
    3. This Privacy Policy constitutes an integral part with the Website Terms and Conditions, which can be found at the link https://fizen.com/terms-and-conditions including the definition of the terms used in this Privacy Policy.
    4. This Privacy Policy aims to ensure compliance of the processing of personal data with the Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive, referred to as "GDPR").

    2. Principles of operational data processing

    The information contained in system logs (e.g. IP address) resulting from the general principles of Internet connections is used by the Website for technical purposes related to the administration of our servers. In addition, IP addresses are used to collect general, statistical demographic information (e.g. about the region from which the connection is made; number of visits, gender, age of the user). Such information is automatically deleted 26 months after its registration in the statistical tool.

    3. Data required during communication via the Website

    1. A User is any natural or legal person reading the information available on the Website, contacting FIZEN using the forms available on the Website, by e-mail or other ways indicated on the Website.
    2. In order to properly communicate with FIZEN or register via the Website to use the service offered by FIZEN, the company provides on the Website a contact form or an e-mail address enabling identification of the User to the extent necessary to handle their inquiry, complaint, claim.
    3. The User may not impersonate other persons or share their identification data with other persons, except for persons duly authorized by the User to act on their behalf.

    4. User rights

    In connection with the processing of personal data by FIZEN, Users who are the natural persons whose personal data is processed via Website or e-mail contact with FIZEN have a number of rights:

    • The User can obtain information on how and to what extent FIZEN processes data and additionally receive a copy of their personal data processed by FIZEN.
    • The User may request the rectification of their data, its deletion or the restriction of processing.
    • The User may request the transfer of their data in a structured, commonly used and machine-readable format.
    • If the processing of User's data by FIZEN takes place on the basis of the legitimate interest of the controller - the User may object to such processing.

    In addition, the User also has the right to file a complaint with the supervisory body (in Poland - the President of the Office for Personal Data Protection - 2 Stawki Street, 00-193 Warsaw, kancelaria@uodo.gov.pl, www.uodo.gov.pl).

    5. Personal data

    1. FIZEN processes personal data in a manner consistent with applicable law in accordance with the principles set out in the Privacy Policy, in particular regarding adequate data protection.
    2. FIZEN processes the User's personal data to the extent necessary to establish, shape the content, change, solve and correctly implement services provided electronically.

    6. Information storage and protection

    1. Users' personal data are stored in a database in which technical and organizational measures have been applied to ensure the protection of the processed data in accordance with the requirements set out in the provisions on the protection of personal data, including in particular the GDPR.
    2. Personal data is processed using servers located in Poland or in the countries of the European Economic Area.
    3. Only IT system administrators with special authorizations granted by FIZEN (data controller) have access to the database containing personal data.

    7. The right to verify, modify and delete personal data

    The User has the right to access their data at any time and has the option of updating, changing and deleting it. In certain cases pertaining to the interests of FIZEN as data controller we may refuse to delete the data necessary to block the attempts of breaching the laws, this Privacy Policy, Terms and Conditions or contracts.

    8. Links to other websites

    FIZEN has no influence on the privacy policy applied by owners or administrators of websites to which links posted on the Website redirect (including social media such as www.facebook.com, www.instagram.com, www.linkedin.com, www.twitter.com, www.youtube.com) and therefore is not legally responsible for its scope or implementation.

    9. Information Sent to the User

    1. FIZEN may send the User electronic correspondence (e-mail) with information or replies regarding notifications, inquiries, complaints, claims or other messages sent by the User to FIZEN.
    2. FIZEN may send e-mails of a commercial nature, especially advertisements and other commercial information, provided that the User has agreed to it.

    10. Fizen for AI assistants: account, bank data and history of events

    This part covers the Fizen account at dashboard.fizen.com and the mcp.fizen.com service, through which AI assistants (e.g. Claude, ChatGPT) read data from the accounts you share with them.

    1. You create the account by signing in with Google. From Google we receive your email address, name and profile picture. We do not verify your identity through a bank. Access to the service is turned on step by step, once FIZEN approves the account.
    2. We fetch bank data (accounts, balances, transaction history) only on the basis of your consent to account information access, given in your bank, for up to 180 days. We keep copies of this data for at most 30 days from the last fetch. Removing a bank from your Fizen account deletes its accounts and data copies at once.
    3. An AI assistant receives data only from the accounts shared with that app. You can change or disconnect apps and their accounts at any time in your Fizen account. Further processing by the assistant's provider is governed by its own privacy policy.
    4. We keep a history of events: who did what in the account, when and from which IP address (e.g. sign-ins, access given and withdrawn, banks linked and removed, AI apps connected, each assistant request for data). It serves to show what you agreed to (art. 18 of the Polish Payment Services Act), the security of our systems (DORA, Regulation 2022/2554, and Delegated Regulation 2024/1774) and the defence of claims. The legal basis is art. 6(1)(c) and (f) GDPR.
    5. Retention periods for the history of events:
      • consents and access (banks linked and removed, AI apps, account access): 6 years,
      • sign-ins and security events: 2 years,
      • AI assistant requests: 12 months, with their content (e.g. search phrases) deleted after 90 days,
      • IP addresses older than 2 years are cut to the network address.
    6. When you delete your account, we delete the account, linked accounts, consents, bank data copies and AI app access. The history of events remains for the periods above, without your email address and with IP addresses cut to the network address.
    7. We process the data on Google Cloud servers in Warsaw (region europe-central2).