Privacy Policy

Last updated: October 30, 2026 (version 2026-10-30)

Veyo is a personal finance app made by Automadesk. This policy explains what we collect, why, who sees it, how long we keep it, and the choices you have. It applies to users in the United States, Brazil and anywhere else, and follows the LGPD (Brazil), the CCPA/CPRA (California) and general U.S. privacy practice.

What we collect

Account data: your name, email address, a password (stored only as a one-way hash), language and time zone.

Financial data you add or connect: expenses, income, bills, goals, categories and account balances. Bank data comes only through a bank connection you choose to make, and only to read it.

Technical data: the device name of each session and the time it was last used, to let you review and sign out devices.

We do not collect your contacts, photos, precise location or advertising identifiers.

Why we use it

To run the app: sign you in, calculate what you can safely spend, remind you of bills and answer your questions. Legal basis: performance of the contract and your consent.

To keep your account secure and prevent fraud. Legal basis: legitimate interest.

To send marketing emails or measure anonymous usage, only if you turn those options on in Settings, Privacy and data. You can turn them off at any time.

Who we share it with

We do not sell your personal information and we do not share it for advertising.

Service providers process data for us under contract: cloud hosting and database (Railway), email delivery (Resend), payments (Stripe), bank connection (Plaid, when you connect a bank) and AI processing of the questions you ask Veyo. They may only use it to provide the service.

We may disclose data if the law requires it.

How we protect it

Connections to Veyo are encrypted in transit (HTTPS/TLS).

Passwords are hashed with scrypt, and sign-in codes and session tokens are stored only as hashes.

Each user's data is isolated by account. Sessions rotate, stolen tokens are detected and revoked, accounts lock after repeated wrong passwords, and you can lock the app with Face ID.

No system is perfectly secure. If a breach affects your data we will notify you and the authorities as the law requires.

How long we keep it

We keep your data while your account is open. When you delete your account in the app, your profile, financial data, sessions and consents are permanently deleted from our database right away. Backups held by our provider are overwritten on their normal cycle.

Your rights

You can confirm that we process your data, access it, correct it, export it in a portable file, delete it, withdraw consent and ask about sharing. This is your right under the LGPD (art. 18) and, if you are a California resident, under the CCPA/CPRA (know, delete, correct, opt out of sale or sharing, and no discrimination for using your rights).

In the app, go to Settings, Privacy and data to export your data, change your consents or delete your account. For anything else, contact us at veyosuporte.com.

Children

Veyo is for adults. We do not knowingly collect data from anyone under 18.

International transfers

Our servers are in the United States. If you use Veyo from Brazil or elsewhere, your data is transferred there with the safeguards described above.

Changes and contact

If we make important changes we will tell you in the app before they apply. Questions, requests and complaints (including to our data protection contact): veyosuporte.com.