Banker
This Privacy Policy (the "Policy") describes how Banker ("Banker", "the Platform", "we"), operated by 3-101-969375 SOCIEDAD ANONIMA, corporate ID 3-101-969375, domiciled in Costa Rica, collects, uses, safeguards and shares your personal data. For any matter regarding your data you can write to us at support@bankercr.com.
The processing of your data is governed by Costa Rica’s Law on the Protection of Individuals regarding the Processing of their Personal Data (Law No. 8968), its regulations and other applicable rules. This Policy forms an integral part of the Terms and Conditions: by accepting the Terms, you also accept this Policy.
This Policy applies to the information we process when you create an account, use the Platform, connect third-party services or communicate with us. It does not apply to third-party sites, applications or services you choose to use, which are governed by their own policies.
The financial data you register or synchronize is yours. Banker processes it only to provide the service you request and on the terms described in this Policy.
Account data: your email, password (stored using safeguarding techniques, never in plain text) and your profile settings, including a second authentication factor if you enable it.
Financial information you register or synchronize: accounts, balances, transactions, budgets, debts, goals, provisions, receivables and payables, as well as the electronic receipts you issue or receive and the data of your counterparties in those receipts.
Third-party credentials: when you request it, the credentials for your financial institution or for the Ministry of Finance electronic-receipt system (including the cryptographic key and its PIN), which are stored encrypted and used only for the feature you ask for.
Technical and usage data: IP address, device and browser identifiers, timestamps, activity logs and security events, needed to operate the Platform, prevent fraud and diagnose issues.
We use your data to: provide and maintain the Platform; synchronize your transactions and balances; build, sign and submit your electronic receipts; generate reports and indicators; provide support; keep your account secure; comply with legal obligations; and improve the product through aggregated, anonymized statistics that do not identify you.
The legal bases for processing are, as applicable: your consent, performance of the service contract you accept by using the Platform, compliance with legal obligations and our legitimate interest in operating and protecting the service.
Some features, such as category suggestions for your transactions and the in-app help assistant, process data using a third-party artificial-intelligence provider’s models. We send only the data necessary to produce the result you request.
These aids are probabilistic: they can be wrong and you should review them before relying on them. We do not use your data to let third parties train their models for purposes unrelated to providing the feature to you.
Third-party credentials you entrust to Banker are encrypted using managed key-management systems (KMS) and used exclusively to synchronize your transactions, sign your receipts or authenticate your submissions to the Ministry of Finance. They are never displayed back in the browser nor shared with third parties unrelated to providing the service.
We apply encryption in transit and at rest for sensitive information. You may delete your stored credentials at any time from the corresponding settings.
We do not sell your personal data and do not use it for third-party advertising. We share it only in these cases: with providers that supply us infrastructure and services (for example, cloud hosting, artificial-intelligence models for categorization and exchange-rate providers), which process it on our behalf and under confidentiality obligations.
With the services you choose to connect or direct information to (your financial institution, the Ministry of Finance) to the extent needed to carry out the action you request; with the members of a workspace you share, according to the role you assign them.
With competent authorities when required by law or an order, and in the context of a reorganization, merger or sale of the business, in which case we will inform you and the acquirer will be bound by this Policy.
The Platform is hosted on first-tier providers’ infrastructure that may be located outside Costa Rica, including the United States. When this involves an international transfer of your data, we seek to ensure reasonable and contractual safeguards to protect it in accordance with applicable rules.
We keep your data while you hold an account and for as long as necessary for the purposes described. When you close your account we delete your information, except what we must keep for legal retention periods (for example, electronic-receipt backups or tax obligations) or to handle claims and comply with the law.
You have the right to access your data, rectify it, request its deletion, object to certain processing, withdraw your consent and obtain an exportable copy of your information. You can exercise several of these rights directly from the Platform’s options (for example, export your information or close your account) or by writing to us at support@bankercr.com.
We will address your request within the periods set by law. Withdrawing consent does not affect the lawfulness of prior processing nor features that depend on data we must keep by law. You may also turn to the Agency for the Protection of Data of Inhabitants (PRODHAB) of Costa Rica.
We use cookies and browser local storage strictly necessary to keep your session signed in, remember your preferences and operate the Platform securely. We do not use third-party advertising cookies.
You can control or clear browser storage from your browser settings; doing so may sign you out or reset some preferences.
When you share a workspace, the information within it is accessible to its members according to the role you assign them. Whoever administers a workspace is responsible for the invitations they issue and the permissions they grant. Consider carefully what you share and with whom.
We apply reasonable technical and organizational measures to protect your data, including encryption of sensitive credentials, access control and event logging. Security is a shared responsibility: you must safeguard your credentials, enable multi-factor authentication and take care of the devices from which you access the service.
No system is completely infallible. In the event of a security incident that materially affects your data, we will act in accordance with applicable law and notify you where appropriate.
The Platform is intended for people at least eighteen (18) years old. We do not knowingly collect data from minors. If we detect that we have processed a minor’s data without the corresponding authorization, we will delete it.
We may update this Policy to reflect changes in the service or in the applicable rules. When a change is substantial, we will notify you through the Platform or by email with reasonable advance notice. Use of the service after the effective date constitutes your acceptance of the updated Policy.
For questions about this Policy or to exercise your rights, you can write to us at support@bankercr.com. The supervisory authority for personal data in Costa Rica is the Agency for the Protection of Data of Inhabitants (PRODHAB). Last updated: September 3, 2026.