bi.lab Finanzas — Privacy Policy
Last updated: June 16, 2026
1. Introduction
This Privacy Policy describes how BI.LAB AGENCY LLC (“bi.lab”, “we”) handles data within bi.lab Finanzas, an internal financial-management application used to operate the company’s own finances. The application is used by authorized members of bi.lab and is not offered to the general public.
2. Data we process
(a) Company financial data: transactions, balances, and account information from bi.lab’s own business bank accounts, accessed through Plaid. (b) Client billing data: names, contact details, and billing information of bi.lab’s clients, used for invoicing. (c) Authentication data: user credentials and multi-factor authentication secrets for authorized users.
3. How we use data
We use this data solely to operate bi.lab’s internal financial management — recording transactions, generating invoices and reports, tracking balances, and supporting financial decisions. We do not use it for advertising, and we do not sell it.
4. Plaid
We use Plaid Inc. to securely connect to bi.lab’s business bank account and retrieve transaction and balance information. Use of Plaid is subject to Plaid’s End User Privacy Policy. We access only the data required to operate our financial-management functions.
5. How we protect data
Encryption in transit via TLS 1.2+; encryption at rest via AES-256 on managed database infrastructure, with additional application-level AES-256-GCM encryption for sensitive credentials and access tokens; access restricted to authorized users protected by multi-factor authentication; hosting on managed, SOC 2-compliant infrastructure (Vercel, Supabase).
6. Data sharing
We do not sell or rent data. It is processed only by our infrastructure providers (Vercel, Supabase) and Plaid, each under their own terms and security obligations, strictly to provide the application’s functionality.
7. Data retention
We retain financial and client data as long as necessary to operate the business and meet legal, tax, and accounting obligations.
8. Your rights
Authorized users and clients may request access to, correction of, or deletion of their data — subject to our legal and accounting retention obligations — by contacting us.
9. Contact
10. Changes
We may update this policy as the application evolves; material changes will be reflected here with an updated date.