Privacy policy

Dibein SAS (“Dibein”, “we”, “us”) provides an AI cash intelligence platform for finance teams. This policy explains what personal data we collect through our website and product, why we collect it, and the rights you have over it. We are the data controller for the personal data described in this policy.

Dibein SAS
59 Rue de l'Epeule, 92500 Rueil-Malmaison, Île-de-France, France
hello@dibein.com

We collect three broad categories of data:

Account and contact data — name, work email, company, and role, provided when you create an account, request a demo, or contact us.

Connected financial data — with your explicit authorization, bank transaction and balance data (via licensed Open Banking providers) and accounting ledger data (via your accounting software’s API), used to power forecasts, scenarios, and anomaly detection. We never receive or store your online banking credentials.

Usage data — how you interact with the product (features used, questions asked to Ask Dibein, pages visited), collected to improve reliability and support. Our marketing website does not use third-party analytics or advertising cookies.

We process account and usage data under contract (to provide the service you’ve signed up for) and legitimate interest (to keep the product secure and reliable). We process connected financial data under your explicit consent, given at the point you authorize each bank or accounting connection, and revocable at any time by disconnecting that source in your account settings.

Connected financial data is used exclusively to generate your own forecasts, scenarios, and anomaly alerts, and to answer your own questions through Ask Dibein. It is never used to train models shared across other customers, never sold, and never used for advertising.

We share data with a small number of sub-processors necessary to run the service: licensed Open Banking aggregators for bank connectivity, our EU cloud hosting providers, and our transactional email provider. A current list is published on our security & trust page. Each sub-processor is bound by a data processing agreement. We do not sell personal data or share it with data brokers.

Our infrastructure and sub-processors are based in the EU/EEA. We do not transfer personal or financial data outside the EU/EEA as part of normal operation. If that ever changes for a specific feature, we’ll rely on an appropriate safeguard (such as Standard Contractual Clauses) and update this policy before doing so.

Connected financial data is retained for as long as the relevant connection is active, plus 30 days after disconnection to allow for export requests, after which it is deleted from active systems. Backups age out on a rolling 90-day cycle. Account data is retained for as long as your account is active, and deleted or anonymized within 90 days of account closure, except where we’re required to retain it longer by law.

Under the GDPR, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, email hello@dibein.com. We respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority, at cnil.fr.

Data is encrypted in transit and at rest, access to production data is role-based and logged, and all bank connections are read-only. Full detail is on our security & trust page.

This website uses only strictly necessary cookies required for basic functionality (such as remembering a cookie-notice dismissal, where applicable). We do not use third-party advertising or analytics cookies on dibein.com.

We’ll update this page if our practices change materially, and update the “last updated” date above. For significant changes, we’ll notify active customers by email.

Questions about this policy or your data: hello@dibein.com, or by post at 59 Rue de l'Epeule, 92500 Rueil-Malmaison, Île-de-France, France.