1. Who we are
Errios is a spend management platform operated by Errios LLC, a limited liability company registered in the State of Florida, United States, with its registered office at 1100 NW Vivaldi Court, Port St. Lucie, FL 34986, United States ("Errios", "we", "us").
For personal data processed through our website and account sign-up, we are the data controller. For the transaction and account data our customers connect to Errios, our customer is the controller and we act as their processor under our Data Processing Agreement.
Questions about this policy or your data: support@errios.com.
2. What we collect
- Account details: your name, work email, company name and the role you choose for teammates.
- Connected financial data: bank account names, balances and transactions from accounts you connect through Open Banking, or from statements you upload as CSV files.
- Billing details: your plan and invoices. Card details are handled by our payment processor. We never see or store your full card number.
- Usage data: basic technical information such as browser type, pages visited in the app and error logs, used to keep the service secure and working.
- Communications: messages you send us and your email preferences.
3. Read-only bank access
Bank connections run through regulated Open Banking providers. You log in at your own bank. Errios never receives or stores your bank login details.
Access is read-only. Errios can see account details, balances and transactions. It has no permission to make payments or move money. You can revoke access at any time from Errios or directly with your bank, and connections expire unless you renew them.
4. How we use your data
- To provide the service: consolidating your accounts, converting currencies, detecting subscriptions and renewals, and producing analytics, budgets and reports.
- To find savings: our AI models analyse transaction descriptions and amounts to identify subscriptions, duplicates and other savings opportunities.
- To bill you and manage your subscription.
- To send service emails, such as weekly summaries and alerts you have switched on, and product updates if you have opted in.
- To keep Errios secure, prevent misuse and meet our legal obligations.
We do not sell your data, and we do not use your financial data for advertising.
5. Legal basis
- Contract: to provide the service you or your company signed up for.
- Legitimate interests: to secure and improve Errios and to communicate with existing customers, balanced against your rights.
- Consent: for optional marketing emails, which you can withdraw at any time.
- Legal obligation: where we must keep records, for example for tax.
6. Who we share data with
We use a small number of trusted service providers to run Errios. Each processes data only on our instructions, under a data processing agreement, and only as needed to provide the service:
- Regulated Open Banking providers, to connect your bank accounts with read-only access.
- Hosting, database and authentication providers, to run the website and application.
- AI analysis providers, to identify subscriptions, duplicates and savings. We only use providers that do not train their models on your data.
- Payment processors, for billing and invoicing.
- Email delivery providers, for service emails and alerts.
We may also disclose data where required by law, or to a successor if Errios is reorganised or sold, under the same protections.
A current list of our sub-processors is available on request from support@errios.com.
7. International transfers
Errios is based in the United States, and some of our service providers process data in the United States or other countries outside the European Economic Area and the United Kingdom.
When we receive or transfer personal data from the EEA, the UK or Switzerland, we protect it with the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or another lawful transfer mechanism such as the EU–US Data Privacy Framework where a provider is certified. These safeguards are included in our Data Processing Agreement.
8. How long we keep data
We keep account and financial data for as long as your account is active.
When you close your account, we revoke your bank connections and delete your connected financial data within 90 days. You can ask us to delete it sooner by emailing support@errios.com. Backups are removed on their normal cycle.
We keep certain records, such as invoices, for as long as the law requires.
9. Security
Data is encrypted in transit. Access to customer data within Errios is limited to the people who need it, and each customer's entities and accounts are kept separate.
10. Your rights
You can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email us and we will respond within one month.
If you are in the EEA, the UK or Switzerland and are unhappy with how we handle your data, you can complain to the data protection authority in the country where you live or work. We would appreciate the chance to resolve your concern first.
11. Cookies
Our website does not use advertising or tracking cookies. The Errios app uses essential cookies only, to keep you signed in and secure.
12. Changes to this policy
If we make material changes, we will update the date above and let customers know by email or in the app.