Book a demo

Privacy policy

This policy explains what personal information Bo&Nyckel collects when you browse the site, contact us, or use the app, why we use it, how long we keep it, and what rights you can exercise.

It is written for people in the United States and reflects applicable U.S. federal and state privacy laws, including the Colorado Privacy Act where that law applies to our processing.
The business responsible for the personal information described in this policy is Bo & Nyckel, LLC (EIN 82-1229851), 40 Eudora St, Denver, CO 80220, United States. For privacy questions, email [email protected] or call +1 (660) 829-9900.
When you fill out a contact or demo form, Bo&Nyckel collects what you choose to send, such as your name, email address, and, if you add it, a phone number. We use that information only to respond to the request.
When you create an account, we also collect sign-in details and the settings you choose, so the account can work as expected.
If you choose to link a bank account, the connection is made through a third-party bank data provider. With your permission, we receive read-only information such as account names, account types, balances, and transaction history (date, amount, merchant, and description).
Your bank sign-in details go to the bank or the bank data provider, not to Bo&Nyckel. We never store them in readable form, and the connection cannot be used to move money. You can unlink an account at any time, and its data stops updating.
Some technical information is collected automatically when you visit, such as browser type, the page you view, and the time of the visit. We use it to keep the site working and to understand overall use. It is not used to single out a particular person.

We use personal information to answer requests, provide and improve the service, keep the site and your account secure, and meet legal duties. We use financial information from linked accounts only to show you your balances, categories, budgets, and reports. Where a choice is optional, you can withdraw it later. Withdrawing it does not undo processing that already happened.

Information from a contact request is kept long enough to reply, then deleted or archived within a reasonable time. Information tied to an active account is kept while the account exists, and for a limited time after it closes, where the law requires it.

Personal information is available to Bo&Nyckel staff who need it for their work, and to technical providers selected to host or run the service. This includes our hosting and network providers (DigitalOcean and Cloudflare) and the bank data provider that connects your accounts. Those providers are bound by contract to keep the information confidential and protected. We do not sell personal information.

Some providers Bo&Nyckel uses may process information outside the United States. When they do, Bo&Nyckel requires contractual safeguards that match applicable privacy law.

Bo&Nyckel uses reasonable technical and organizational measures to protect personal information from unauthorized access, loss, or alteration, including encryption in transit (TLS) and at rest, read-only bank connections, optional two-step sign-in, and access limits for authorized staff.
The site uses cookies and similar technologies to operate, measure traffic, and, if you agree, personalize some content. Details are in the cookie policy linked from the footer.

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to appeal a denial. Residents of Colorado may have additional rights under the Colorado Privacy Act when it applies, including the right to opt out of certain processing. Residents of California may have rights under the California Consumer Privacy Act. To make a request, use the contact details on this site. Bo&Nyckel responds within 45 days, and may extend that period when the law allows. You can also unlink a bank account or delete your account at any time in your account settings.

If you believe we have handled your information in a way the law does not allow, contact us first so we can try to resolve it. You can also contact the attorney general or privacy regulator in your state. In Colorado, that is the Colorado Attorney General. In California, that is the California Privacy Protection Agency.

We may update this policy when our practices or the law change. The “Last updated” date at the top of the page shows the latest version.