Legal

Terms of service

These terms apply between you and HadesFlow Ltd. (see “Legal notice”) once you create a KontoMate account. Sign-up is not open yet: today the website offers only the demo and the waitlist, which create no account, no contract and nothing to pay. The complete terms, with the model withdrawal form, are shown when you sign up and will be published here at the same time.

What KontoMate is

KontoMate is a personal finance tracker. It shows your bank accounts, investments, crypto, gold, silver, cash, home and car in one place, with budgets, goals, alerts, reports and AI features. It only reads data: it cannot pay, transfer, trade or withdraw money. It gives no investment, tax or legal advice.

Where the data comes from

Bank accounts: KontoMate has no connection to your bank and never asks for your online-banking login. You import a statement (CSV or PDF), upload a photo or screenshot of a statement that AI reads for you, or type the data. Nothing from a file is saved until you have checked and confirmed every row, and the file itself is not kept.

Brokers and crypto exchanges (for example Trading 212, Interactive Brokers, eToro, Binance, Kraken, Coinbase, Bybit): you connect them with your own read-only API key. We store it encrypted, use it only to read, and refuse keys that could trade or withdraw.

Gold, silver, cash, home and car: entered by hand or from PDFs you import.

Your account

You must be 18 or older and use KontoMate for yourself. Keep your password safe (we recommend two-factor authentication), and only add accounts, statements and platforms that are yours or that you may view. You are responsible for checking what you import before you save it.

Plans, trial and payment

There is a Free plan, and Pro for €8 a month or €80 a year, prices including VAT. What each plan includes is shown before you choose it. New accounts get 14 days of Pro without a card; after the trial the account continues on Free, nothing is charged and no data is deleted.

Payments are not open yet; the payment provider is [to be confirmed]. Once they are, paid plans renew automatically for the same period until you cancel in Settings; Pro then stays active until the end of the period you paid for. We tell you about a price change at least [30 days, to be confirmed] before your next renewal, and you can cancel before it applies.

Right of withdrawal

As a consumer in the EU you can withdraw from a paid plan within 14 days of ordering, without giving a reason: use the withdrawal function in Settings, or write to support@kontomate.com. If you asked for Pro to start straight away, you pay only for the days you used. We refund the rest within 14 days, with the same payment method.

If something does not work

For paid plans you have the legal guarantee of conformity: if Pro does not work as described, we fix it free of charge, or you can get a price reduction or end the contract. If we change the service in a way that affects you more than slightly, we tell you in advance and you can end the contract free of charge within 30 days.

Your data

Your data stays yours. We use it only to provide KontoMate, never sell it and never use it to train AI. You can export it and delete it, or your whole account, at any time in Settings.

Liability

We are fully liable for intent and gross negligence, for harm to life, body or health, and wherever the law does not allow a limit. For slight negligence we are liable when we breach an essential duty, for the damage that was typical and foreseeable. Because KontoMate gives no advice and cannot move money, we are not liable for decisions you take based on what it shows, or for errors in data from your platforms, price sources or files, unless we caused them. Nothing here limits your statutory rights as a consumer.

Changes and ending the contract

We tell you about changes to these terms at least [30 days, to be confirmed] in advance, by e-mail and in the app. If you do not agree, you can close your account before they apply, and unused paid time is refunded. You can delete your account at any time. We may suspend or close an account that seriously breaches these terms or the law, and we tell you why. If we ever stop KontoMate, we give at least [3 months, to be confirmed] notice, refund unused paid time and let you export your data first.

Law and disputes

Bulgarian law applies. If you are a consumer living in another EU country, you keep the protection of its mandatory consumer rules and can also go to court there. See “Complaints” for out-of-court options.

Privacy policy

Who is responsible

The controller is HadesFlow Ltd. (ХадесФлоу ЕООД), UIC 208438230, [registered address, to be confirmed], Sofia, Bulgaria. For anything about your data, write to privacy@kontomate.com.

The website and the demo

kontomate.com sets no cookies, has no analytics or ads, and loads nothing from other sites. Our hosting provider Cloudflare processes your IP address and request data to deliver the pages and protect them against attacks (our legitimate interest in a secure website); we keep no logs of our own. The demo at demo.kontomate.com runs in your browser tab with made-up data and sends nothing to us.

The waitlist

If you join the waitlist, we keep your e-mail address, the page language and the sign-up time, with your consent, only to e-mail you once when sign-up opens. Details are in “Waitlist” below.

The app, once sign-up opens

• Account and login (name, e-mail, password hash, language, two-factor secret, login times, browser and IP at login): to provide your account (contract) and keep it secure (legitimate interest).
• Your finances (accounts, balances, transactions, investments, gold and cash, home and car, budgets, goals, notes): to show them to you (contract). They come only from you: files you import, data you type, and platforms you connect with a read-only key. We receive nothing from your bank.
• Imported files and photos: read by AI to find the rows you then confirm; the file is not kept.
• AI features: your questions and the answers, kept as chat history until you clear it or delete your account.
• Feedback and support: what you send us, to answer and improve KontoMate (legitimate interest).
• Security: activity log, usage counters, error logs and IP addresses, to prevent abuse (legitimate interest).
• Payments, once they exist: plan and invoices (contract; legal obligation for accounting).

We never sell your data, show you ads or use your data to train AI models. Please do not enter health, religion or other sensitive data.

Who receives data

Only the providers listed under “Recipients and sub-processors”, each for its stated task and, where it acts for us, under a data processing agreement. We disclose data to authorities only when the law requires it.

Transfers outside the EU

Some providers are in the United States (Cloudflare, OpenRouter, Anthropic, OpenAI, Google). Transfers rely on the EU–US Data Privacy Framework where the provider is certified, otherwise on the European Commission’s Standard Contractual Clauses, plus encryption and data minimisation. Ask us for a copy of the safeguards.

How long we keep data

Account and financial data: while your account exists. When you delete your account, its data is deleted at once; backups are overwritten within [number of days, to be confirmed]. Unconfirmed sign-ups are deleted after 7 days. Login records, security logs and feedback are kept for limited periods [to be confirmed]. Invoices are kept for the period required by Bulgarian accounting law.

AI and automated decisions

AI features are always labelled. They help you understand your own data; they make no decisions about you with legal or similar effects, do not assess creditworthiness and give no investment advice. See “AI notice”.

Your rights

• Access your data and get a copy, have it corrected or deleted, restrict its use, and take it with you (export).
• Object at any time to processing based on our legitimate interest.
• Withdraw your consent at any time (for example for the waitlist), without affecting what was done before.

Many of these you can do yourself in the app (Settings, Your data). Otherwise write to privacy@kontomate.com: it is free and we answer within one month. You can also complain to the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or to the data protection authority of your EU country.

Security

Encryption in transit and for keys and secrets, strict separation of each user’s data, read-only access to platforms and none to banks, two-factor authentication, login alerts and an audit log.

Children

KontoMate, the demo and the waitlist are for adults (18+). If we learn that we hold a child’s data, we delete it.

Changes

We tell you about important changes before they apply. The date at the top of this page shows the current version.

Waitlist

Until KontoMate opens, you can leave your e-mail address on kontomate.com to hear when sign-up opens.

• What we keep: your e-mail address (in lower case), the language of the page you used, and the date and time you signed up. We do not store your IP address; Cloudflare processes it as our hosting provider to deliver the site and protect it.
• Why: to send you one e-mail when registration opens. Nothing else: no newsletter, no marketing list, no sharing.
• Legal basis: your consent, given by ticking the box (it is never ticked in advance). Joining is voluntary.
• How long: deleted once the launch e-mail has been sent, and at the latest 12 months after you signed up.
• Changing your mind: write to privacy@kontomate.com at any time and we delete your address. The launch e-mail will also contain a link to remove it.
• Where: stored with Cloudflare (Workers KV, part of Cloudflare’s global network, see “Transfers outside the EU”). The launch e-mail will be sent through [e-mail provider, to be confirmed].

If someone entered your address without asking you, you will receive only that one e-mail, with a way to remove your address, and nothing else.

Cookies and storage

Website: this site sets no cookies and loads nothing from other sites. It keeps only your theme choice (kontomate-theme) and language choice (kontomate-lang) in your browser’s local storage, on your device only.

Demo: runs in your browser tab with made-up data and sends nothing to us. Closing the tab removes it.

App, once sign-up opens: only cookies and storage that are strictly necessary: a session cookie that keeps you logged in, a browser id used to warn you about logins from new devices, security cookies set by our hosting provider Cloudflare, and your display choices (language, theme, hidden amounts). No tracking, analytics or advertising cookies, so no consent banner is needed.

You can delete cookies and stored data in your browser settings at any time.

Recipients and sub-processors

• Cloudflare, Inc. (USA): delivers the website, demo and app, protects them, and stores the waitlist.
• [Server provider in the EU, to be confirmed]: database and automation servers for the app.
• OpenRouter, Inc. (USA) and Anthropic PBC (USA): the AI model (Claude) behind the assistant, categorisation, statement import, monthly reports and AI support.
• OpenAI, L.L.C. (USA): speech-to-text, only if you use voice messages.
• Google (Google Workspace), later [transactional e-mail provider, to be confirmed]: sends e-mails.
• [Payment provider, to be confirmed]: payments and invoices, once paid plans open.
• Your brokers and exchanges: receive the read requests made with your key, under their own terms and privacy notices.

Prices and exchange rates come from public sources (CoinGecko, Frankfurter/ECB) and involve no personal data. No bank or open-banking provider is involved. We update this list before adding a provider that receives personal data.

Legal notice

KontoMate (kontomate.com, app.kontomate.com, demo.kontomate.com) is provided by HadesFlow Ltd. (ХадесФлоу ЕООД), UIC 208438230, registered in the Commercial Register of the Registry Agency, Republic of Bulgaria.

• Registered office: [address, to be confirmed], Sofia, Bulgaria
• Managing director: [to be confirmed]
• VAT: [to be confirmed]
• E-mail: support@kontomate.com · contact@hadesflow.com · privacy: privacy@kontomate.com
• Hosting: Cloudflare, Inc.; [EU server provider, to be confirmed]

HadesFlow Ltd. is not a bank, payment institution, investment firm or crypto-asset service provider. Supervisory authorities for our general activity: the Commission for Personal Data Protection (www.cpdp.bg) and the Commission for Consumer Protection (www.kzp.bg).

Accessibility

We want kontomate.com and the app to be usable by everyone and work towards WCAG 2.1 level AA. If something is hard to use for you, write to support@kontomate.com and we will help and fix it.

Not investment advice

KontoMate shows facts and trends about your own money. It is not a bank, broker, investment adviser or wealth or portfolio manager, and nothing in it, including AI answers and reports, is a recommendation or an offer to buy, sell or hold any asset.

It does not consider your personal circumstances, goals or risk tolerance. Scenarios such as “if you invest €300 a month” are arithmetic on numbers you choose, not forecasts. Prices and values can be delayed or wrong, past performance says nothing about the future, and investments, including crypto, can lose value. KontoMate never executes transactions. Before financial decisions, consider talking to a licensed adviser.

AI notice

KontoMate uses artificial intelligence in these features, and always shows an AI label where you talk to AI or read text it wrote:

• Assistant: answers questions about your own finances and can propose entries; nothing is saved until you confirm.
• Categorisation: sorts your transactions into categories you can change.
• Statement import: reads statements, photos, receipts and invoices you upload; you check every row before saving.
• Monthly report: a written summary of your month, marked as AI-generated.
• AI support: explains how to use KontoMate; it sees your plan and connection status but no amounts, and cannot change anything.

AI can be wrong or incomplete: check anything important. It gives no investment advice and makes no decisions about you. The model is Anthropic Claude, reached through OpenRouter; voice messages, if you use them, are turned into text by OpenAI. Your data is not used to train AI models. Do not enter passwords, card numbers or other people’s data. A human is always available at support@kontomate.com.

Acceptable use

To keep KontoMate safe for everyone, please do not:

• use it for anything unlawful, such as fraud, money laundering or tax evasion;
• import or connect statements, documents or platforms you are not entitled to, or use someone else’s account;
• share, sell or rent your access, or resell KontoMate without our written consent;
• attack, probe or overload the service, get around its limits, or access it with bots or scrapers;
• upload malicious, illegal or infringing content, or try to make the AI produce unlawful content or reveal other users’ data;
• put other people’s e-mail addresses on the waitlist, or fill it in automatically.

Found a security issue? Please tell us at security@kontomate.com. We may limit, suspend or close accounts that break these rules.

Complaints

Write to support@kontomate.com (or, in the app, Help, Feedback, “Complaint”), saying what happened, when, and what you would like us to do. We confirm receipt within [3 working days, to be confirmed] and answer in writing within [14 days, to be confirmed]; if we need longer, we tell you why.

If you are not satisfied, you can turn to an out-of-court body: in Bulgaria, the general conciliation commissions at the Commission for Consumer Protection (www.kzp.bg), or the alternative dispute resolution body of your EU country. For a cross-border dispute, the European Consumer Centre of your country can help (in Bulgaria: www.ecc.bg). You can also go to court. Complaints about personal data can go to the Commission for Personal Data Protection (www.cpdp.bg) or the authority of your EU country. Your statutory rights are not affected.