Privacy
Policy

1. Data Controller

The controller of your personal data is Martia Labs spółka z ograniczoną odpowiedzialnością (limited liability company) with its registered office in Sopot at ul. Aleja Niepodległości 942, 81-861 Sopot, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ in Gdańsk, 8th Commercial Division of the National Court Register, under KRS number 0001244962, NIP (tax ID): 5851511387, REGON: 544885885, share capital: PLN 10,000.00.

We have not appointed a data protection officer (DPO). For all matters concerning your data and this policy, please contact us at support@martia.ai.

2. What Martia is

Martia is an AI-powered assistant you talk to about your money. It is available as a mobile app (iOS and Android), a web app (app.martia.ai, martia.ai), and an API, in 6 languages. You chat with Martia in your own language, and answers are based on your real bank transactions.

You are talking to an AI system

You are talking to an artificial-intelligence system, not a human. Martia's answers may contain mistakes and do not constitute professional financial, legal, or tax advice. Before you add a voice recording or an image, we show a short in-app notice explaining how that material is processed.

3. What data we process, for what purpose, and on what basis

Below we describe the categories of data we process — together with the purpose, legal basis (Art. 6 GDPR), retention period, and recipients. You will find the list of providers in Section 5 and the retention details in Section 8.

Account and identity data

• Scope: email address, optionally your first name, and your Auth0 user identifier (the “sub”).
• Purpose: creating and running your account, sign-in, and account-related communication.
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
• Retention: for the life of the account.
• Recipients: Auth0 (Okta).

Bank data

• Scope: list of accounts, balances, and transaction history.
• Purpose: showing your balance, spending history, and categories, and answering your questions about your finances.
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract). You authorise the bank connection separately by granting bank consent within your account-information service provider's flow.
• Retention: for the life of the account.
• Recipients: Enable Banking (a licensed AIS provider), Google Cloud.

Content you provide

• Scope: chat messages (including images and voice recordings, if you add them), CSV/PDF imports, and notes.
• Purpose: holding the conversation, analysing and categorising your finances, and personalising answers.
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (our legitimate interest in personalising and improving answers — see Section 4).
• Retention: for the life of the account; you can delete individual conversations yourself.
• Recipients: AI model providers routed via OpenRouter (see Section 5) — for chat, context, and categorisation; OpenAI — for transcribing voice recordings; Google Cloud.

Onboarding answers and preferences

• Scope: answers from the onboarding survey and your settings and preferences.
• Purpose: fitting the product to your needs and configuring the app.
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (product fit).
• Retention: for the life of the account.
• Recipients: Google Cloud.

Payments and subscription

• Scope: email address, billing address, and tax identification number (if you provide it).
• Purpose: handling payments, issuing invoices, and accounting.
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation — accounting rules).
• Retention: accounting documents for the period required by law (in Poland, 5 years counting from the end of the tax year).
• Recipients: Stripe.

Technical and security logs

• Scope: technical logs, which may include an account identifier and information about the operations performed.
• Purpose: security, abuse detection, and diagnostics.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest — security and reliability of the service).
• Retention: up to 12 months.
• Recipients: Google Cloud.

Optional product analytics

• Scope: a pseudonymous account identifier and allowlisted usage events. It does not include chat content, transactions, or onboarding answers.
• Purpose: understanding how you use the app so we can improve it.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in improving how Martia works. Product analytics is enabled by default and links usage events to a pseudonymous account identifier. You can object by turning it off in Settings → Privacy; collection stops immediately. Analytics identifiers are held only in memory for the current app session, without persisting them in cookies or device storage.
• Retention: up to 12 months.
• Recipients: PostHog (EU Cloud).

Optional marketing-site analytics

• Scope: Approximate location, device type, public pages visited, selected clicks, traffic source, campaign parameters and pseudonymous browser identifiers. This does not include bank data, chat messages or form contents.
• Purpose: understanding how the marketing site is used.
• Legal basis: Art. 6(1)(a) GDPR (consent). We ask on the cookie banner. Refusing does not change how the site works. You can change or withdraw analytics and advertising consent independently in Cookie settings in the marketing-site footer. We remember your choices for 180 days.
• Retention: up to 14 months (GA4’s default retention).
• Recipients: Google Ireland Limited / Google LLC (Google Analytics) and PostHog (EU Cloud), only with analytics consent.

Optional advertising and conversion measurement

After we configure and enable the advertising services, and only with your separate advertising consent, Google Ads and Meta Pixel through Google Tag Manager may be used to show you Martia ads and measure their effectiveness. Without that configuration, advertising tags remain inactive.

Advertising signals cover visits and selected clicks on public marketing pages, campaign parameters and ad click identifiers, plus verified Martia subscription purchases: transaction reference, amount, currency, plan and whether the purchase starts a trial. We do not send bank balances, bank transactions, chat messages or form contents to these advertising tools. With your advertising consent, Google may link these visit signals with data from the Google account you are signed in to, including across devices, if you have Google Ads Personalization turned on.

The legal basis is your consent (Art. 6(1)(a) GDPR). Advertising is optional and independent of analytics. You can refuse or withdraw it at any time in Cookie settings, without losing access to the service. Withdrawal stops further advertising measurement and does not affect the lawfulness of earlier processing.

Operational notifications and support emails

• Scope: service notifications sent to a private team chat (e.g. signup, onboarding completed, purchase, account-deletion request) and support correspondence.
• Purpose: operating and running the service correctly and contacting you.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest — operating the service).
• Retention: cleaned up on a 12-month cycle.
• Recipients: Telegram (internal operational notifications), Resend (email delivery), and authorised team members.

4. Financial profile, memory, and no automated decisions

To answer more accurately, Martia builds a profile of your financial situation from your data, along with a “memory” — it remembers context from earlier conversations to personalise answers. We do this to perform our contract (Art. 6(1)(b) GDPR) and in our legitimate interest in providing a useful, personalised assistant (Art. 6(1)(f) GDPR). You can delete individual conversations in the app at any time.

We do not make automated decisions about you that produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR. Martia does not perform credit scoring, does not make credit decisions, and does not provide regulated investment advice.

5. Who we share data with

We do not sell your personal or financial data. We use the following providers as processors and, where applicable, independent controllers. Advertising providers receive only the signals described in Section 3, after the services are enabled and you give separate advertising consent.

The current list of those providers — what each one does, which data it receives, and where it processes it — is on our subprocessors page. We update it before a new provider starts processing personal data.

We conclude the required data-processing agreements with our providers.

6. Transfers outside the EEA

Some providers — especially AI model providers and US-based entities — may process data outside the European Economic Area, including in the United States and in China (Z.ai). Where this happens, we rely on the transfer mechanisms provided for by law: standard contractual clauses or an adequacy decision (including the EU–US Data Privacy Framework, where applicable).

7. Whether your conversations train AI models

We do not use your data to train our own models. We engage AI model providers under API terms that — per their current policies — do not grant them the right to train on customer content. We do not sell data. Bank data and conversation content are not shared with advertising providers.

8. How long we retain data

We keep data only for as long as it is needed:

• Account data, transactions, and content (chat, imports) — for the life of the account; deleted when the account is deleted.
• Technical logs — up to 12 months.
• Analytics data — up to 12 months.
• Raw bank-sync archives — up to 90 days.
• Backups — age out on a cycle of up to 30 days; we do not restore them into production systems without checking for prior deletion requests.
• Accounting documents — for the period required by law (in Poland, 5 years from the end of the tax year).
• Notification emails — cleaned up on a 12-month cycle.

9. Your rights (GDPR)

In connection with the processing of your data, you have the following rights:

• Right of access — you may request a copy of the data we process about you.
• Right to rectification — you may request correction of inaccurate data.
• Right to erasure — you may request deletion of your data (right to be forgotten).
• Right to data portability — you may receive your data in a machine-readable format.
• Right to restriction of processing — in certain circumstances.
• Right to object — you may object to processing based on legitimate interest.
• Right to withdraw consent — at any time, where we process data based on consent (e.g. analytics); withdrawal does not affect the lawfulness of earlier processing.

To exercise these rights, write to support@martia.ai or use the in-app option. We confirm receipt within 24 hours and fulfil requests without undue delay, at the latest within one month.

You also have the right to lodge a complaint with a supervisory authority. For Martia, the lead supervisory authority is the President of the Polish Personal Data Protection Office (UODO); you may also contact the authority in your country of residence.

10. Deleting your account and data

You can delete your account and data yourself in the app (Settings → Delete account and data) or at https://martia.ai/delete-account.

Once we receive your request, we block the account, cancel any active subscription, and permanently delete data from our active systems and from our providers: from Auth0, from PostHog, from Google Cloud storage, and we revoke the session with the bank provider. We retain Stripe invoices for the period required by tax law. Backups age out on a cycle of up to 30 days.

11. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction. All data is transmitted exclusively over encrypted HTTPS connections.

The bank connection operates in read-only mode — we never know your banking password and cannot perform transactions on your account.

12. Cookies and analytics

We use technical cookies and browser storage for sessions and sign-in, and to remember your analytics and advertising choices for 180 days. Marketing-site analytics uses Google Analytics and PostHog only with analytics consent. Advertising cookies are used only when advertising services are enabled and you separately consent. Cookie settings in the marketing-site footer let you change or withdraw either choice. Advertising consent can also be changed on the public app sign-in screen. Product analytics in the app is enabled by default, links events to your account and can be turned off in Settings → Privacy. We do not sell data.

13. Changes to this policy

Version 2026-10-03 changes product analytics to on by default, with an off switch in Settings. Events remain linked to the account. The current account setting replaces the previous consent model and starts enabled.

We will notify you of material changes in advance — in the app or by email — explaining what the change involves. This policy is informational and is not a contract; continued use of the app does not constitute “acceptance” of its contents.

Version 2026-09-03 replaces the document dated 2026-07-11. It adds consent for Google Analytics on the marketing sites.

Version 2026-09-07 replaces the document dated 2026-09-03. The PostgreSQL database moved to Google Cloud SQL in the EU region, so Neon is no longer a processor. Nothing else changed.

Version 2026-09-21 replaces the document dated 2026-09-07. Internal operational notifications moved from company mailboxes to a private team chat delivered through Telegram. User and support emails remain on Resend.

Version 2026-09-22 replaces the document dated 2026-09-21. Transaction categorisation can now be performed by a decision model from TypeSafe, routed through OpenRouter like our other models. It receives the transaction description and the counterparty name — the same text the previous models received; no new category of data leaves the app.

Version 2026-09-23 replaces the document dated 2026-09-22. Section 5 no longer lists providers itself; the list moved to a separate subprocessors page that we keep up to date. That list also names providers the previous version did not: DeepInfra (a host for one of the AI models), OneSignal (push notifications), and RevenueCat and Apple (in-app purchases on iOS).