finansii Privacy Policy

1. Who we are

VI TEK DOO runs the Service. It determines the purposes and means of the processing for which it acts as controller, as explained below. "We", "us" and "our" in this policy mean VI TEK DOO. Amnium OÜ publishes the app on Google Play and holds its distribution rights for other EU countries; it does not process users' personal data.

The Service is currently offered in North Macedonia.

Privacy questions and requests: support@amnium.io.

We process personal data under the Law on Personal Data Protection of North Macedonia and, where it applies, the EU General Data Protection Regulation (GDPR).

2. Your company's records

Your company decides what data about its customers, suppliers and staff goes into its invoices, expenses and other records. For that data, your company is the controller and we act as its processor. We process it only to provide the Service and on your company's instructions, under the data processing terms in section 11 of our Terms and Conditions. This includes storing and sending records and extracting fields from documents your company uploads.

For your own account, billing, security and support, we are the controller.

3. Data we collect

Which data we handle depends on the features you use.

Data we do not access and tools we do not use:

• Card numbers. Card payments go through NLB Banka's hosted checkout page, and full card details never reach our systems.
• Analytics. The Android app, the web app and our public website do not use analytics or advertising tools. If we add analytics to our public website, we will ask for your consent there first. Before it is enabled, we will update this policy with what is collected and how long it is kept.
• Contacts. The Android app does not access your contacts.

4. Android permissions

The app requests Android permissions when you use a feature that needs them. You can refuse or withdraw a permission at any time in Android settings. Only that feature stops working; the rest of the app keeps working.

Withdrawing a permission does not delete data you have already uploaded. To delete it, see section 9.

5. How we use data and why

We use personal data only to run, secure, bill, support and improve the Service. We do not sell personal data, and we do not use it for advertising.

This table covers data we control. For your company's records (section 2), we follow your company's instructions.

We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

6. AI features

Amnium Compass answers questions from the Amnium reference library of laws, rules and help content. It does not read your company's records. Anything you type into a question is processed, so include only what the question needs. We keep each question and answer for 30 days from its creation so you can see your history, then delete it automatically, unless you request deletion sooner under section 9.

Automatic document extraction reads the documents you submit to fill in record fields. Check extracted fields before you save them.

Both features run on Amazon Bedrock, the AI service of Amazon Web Services. Document extraction uses OpenAI models hosted on Amazon Bedrock, so your documents are processed by AWS, not sent to OpenAI. Our Amazon Bedrock inference configuration does not retain submitted content or generated output after processing. Under the applicable AWS terms for Amazon Bedrock, that content is not used to train AI models. Separately, finansii itself stores your Compass questions and answers for 30 days to show your history, as described above.

AI output can be wrong. Compass answers are general information, not legal or tax advice.

7. Who we share data with

We share data only with the providers that run the Service, the banks you connect, the people you authorise, and authorities when the law requires it.

• Our processors: Amazon Web Services and Google process customer data on our behalf under written data processing terms. Their applicable service and privacy terms also describe technical service data they process to operate, secure and administer their own services.
• Independent controllers: NLB Banka, for card payments, and the banks you connect have their own legal duties for the data they receive, described in their own privacy notices.
• Invited users: users your company invites, such as staff, access data under your company's authorisation. An outside accountant's responsibilities depend on their arrangement with your company.

If our business is merged or sold, personal data may pass to the new owner, who must continue to protect it under this policy.

8. Storage, transfers and security

Our main service hosting and storage are on Amazon Web Services servers in Frankfurt, Germany, in the EU. Our team in North Macedonia accesses the data to run and support the Service. Some providers, such as Google for push notifications and AWS for AI processing, may process data in other countries, including the USA.

We transfer personal data outside North Macedonia only where the Law on Personal Data Protection allows it, and with the safeguards it requires, including the data processing terms of our providers. You can ask us for details at support@amnium.io.

Security measures:

• encryption in transit (HTTPS/TLS) and at rest, including backups;
• passwords stored only as secure hashes;
• two-factor authentication with an authenticator app or email code;
• access limited to staff who need it, under confidentiality obligations;
• automatic daily backups for recovery.

No system is perfectly secure. Keep your sign-in details private and tell us at once if you suspect misuse. We notify the supervisory authority and affected individuals of personal data breaches when required by applicable law.

9. Delete your account and data

You can delete your finansii account and its data at any time, with or without the app.

10. Your rights

Subject to the conditions and exceptions in applicable data protection law, you can ask us to:

• give you access to and a copy of your personal data;
• correct inaccurate data;
• delete your data;
• restrict or object to some processing;
• send your data to you or another provider in a usable format;
• withdraw consent at any time, without affecting earlier processing.

Write to support@amnium.io. We respond without undue delay and within one month of receipt. If a statutory extension is needed because of the complexity or number of requests, we explain the reason and revised deadline within that month. The shorter deletion commitments in section 9 remain applicable to the requests they cover.

For data in your company's records, contact your company first; we help it answer your request.

You can also complain to the Personal Data Protection Agency of North Macedonia (azlp.mk) or, if you are in the EU, to the data protection authority in your country.

11. Who can use finansii

finansii is a business tool for people aged 18 and over. It is not directed to children, and we do not knowingly collect their data.

12. Changes to this policy

We publish any change on this page with a new effective date. For important changes, we tell you in the app or by email at least 30 days before they apply.

13. Contact

VI TEK DOO import-export Skopje
Dame Gruev 3/7-7, 1000 Skopje, North Macedonia
Company ID (EMBS) 7392532
support@amnium.io