Who processes your data, where and for how long.
The data controller is Tomasz Żyłka Veinito.com, Wrocław. Below you will find every vendor, its role, processing region and retention. We update this page before a new vendor starts processing data, and we check it monthly.
AI processed in the EU. Questions in the app, the letter from 2056 and voice conversations go only to endpoints in the European Union (Anthropic, EU endpoint; ElevenLabs, EU region). No AI vendor outside the EU receives your transactions. As of 9 October 2026.
| Vendor | Role | Processing region | Retention | Link |
|---|---|---|---|---|
| Enable Banking Oy | account access (PSD2, AISP), reading transactions and balances with your consent | Finland (EU), Helsinki | consent tokens until consent is revoked; bank account data stays with us until you delete your Kasandro account | enablebanking.com |
| Anthropic | the Claude model: questions in the app, the letter from 2056, the weekly observation, categorisation | EU endpoint | nothing stored after the answer; API customer data is not used for training | anthropic.com |
| ElevenLabs | the assistant's voice, reading the letter, a voice clone at your request | EU region (EU data residency) | audio is not stored after synthesis; the voice clone is deleted once the letter is generated | elevenlabs.io |
| Neon | Postgres database (encrypted transactions, accounts, households) | Germany (EU), Frankfurt | until you delete your account; backups kept for up to 30 days | neon.tech |
| Netlify | hosting of the site and the app, edge functions | Germany (EU), Frankfurt | access logs kept for 30 days, with no transaction content | netlify.com |
| Resend | e-mail: sign-in codes, the letter from 2056, notifications | EU region | message content kept for 3 days, delivery metadata for 30 days | resend.com |
| Stripe | payments: card, BLIK, Apple Pay, Google Pay, invoices | Ireland (EU) and the US (standard contractual clauses) | card data only at Stripe; we see the last 4 digits and the status | stripe.com |
| OpenFreeMap (OpenMapTiles, OpenStreetMap data) | map tiles on the site and in the app; the provider sees the IP address and the coordinates of the tiles fetched, never a transaction or an identifier | Hetzner servers (EU) | no accounts, no cookies, no API key; the provider's server logs | openfreemap.org |
Retention periods and regions are confirmed in writing with every vendor before launch; a row is updated before a new vendor starts processing personal data. There are no analytics or advertising vendors here. Questions: support@kasandro.com. Related: Privacy policy · Security on the home page · EBA register (Enable Banking).
Kasandro is an insight tool for your finances, not investment or financial advice.