Privacy Policy

Last updated: January 1, 2026

PrimeBalance AG ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact information (email, phone, address)
• Company name and job title
• Account credentials
• Payment and billing information
• Communications you send to us

1.2 Financial Data

When you use our platform, you may upload or input financial data including transactions, invoices, bank statements, and other financial records. This data is processed solely to provide our services to you.

1.3 Automatically Collected Information

We automatically collect certain information when you visit our website:

• IP address and device identifiers
• Browser type and operating system
• Pages visited and time spent
• Referring website
• Click patterns and interactions

2. How We Use Your Information

We use the collected information for:

• Providing and maintaining our services
• Processing transactions and sending related information
• Responding to your inquiries and support requests
• Sending promotional communications (with your consent)
• Analyzing usage to improve our services
• Detecting and preventing fraud
• Complying with legal obligations

3. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Improving services, fraud prevention, marketing
• Legal Obligations: Compliance with applicable laws
• Consent: Marketing communications and cookies

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties who assist in operating our services (hosting, payment processing, analytics)
• Business Partners: With your consent, for integrated services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures including:

• TLS encryption for data in transit
• Regular security audits and penetration testing
• Role-based access controls
• Multi-factor authentication

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Financial data is retained according to applicable legal requirements (typically 7-10 years for tax purposes).

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit processing of your data
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@prime-balance.de.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

11. Contact Us

For questions about this Privacy Policy or our data practices:

12. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your residence, place of work, or place of the alleged infringement.