Terms and Conditions

1. Purpose of the contract

ControlarGastos offers a web application to record and analyse personal and shared expenses between individuals, with features for splitting, tagging, debts between members, charts and an assistant based on artificial intelligence.

2. Acceptance and registration

To use the authenticated features you must create an account by providing a valid email and a password. By registering you declare that:

• You are at least 14 years old.
• The data you provide is truthful and up to date.
• You accept these Terms, the Privacy Policy, the Legal Notice and the Cookie Policy.

The email may require verification before the account is enabled. Acceptance is deemed to be given at the moment of registration and is renewed with each sign-in.

3. User account

You are responsible for the confidentiality of your credentials and for the activity carried out from your account. The Service keeps one active session per device using a rotating-token system: if we detect anomalous use of your refresh token, we will automatically revoke the entire session family.

You must immediately report any unauthorised access by writing to [email protected].

4. Plans and subscriptions

The Service is offered in plans with different fees and features. The specific characteristics of each plan are published within the Service and may be updated with reasonable prior notice.

The paid plans are still being defined. In the meantime, new Pro and Premium subscriptions are managed through a waiting list and no amount is charged. When the paid plans go live, specific conditions (price, billing period, cancellation and refund policy) will be published and notified to those on the list.

5. Acceptable use

You undertake not to:

• Share your account with third parties or transfer it. With a single, expressly regulated exception: the access tokens for artificial intelligence agents in section 6.1, which are the only authorised way for an external system to act on your behalf. Outside of it, do not share your credentials and do not let another person use your account.
• Carry out mass scraping, automated data extraction or reverse engineering of the Service.
• Overload the Service with automated requests or circumvent the quota systems.
• Upload personal data of third parties without their consent beyond what is strictly necessary for sharing shared expenses.
• Use the Service for unlawful or fraudulent activities or activities that infringe the rights of third parties.

6. Artificial intelligence features

The assistant and receipt analysis use artificial intelligence models served by external providers (currently OpenRouter, Inc., based in the United States). By using these features you accept that the strictly necessary data (the messages you send to the assistant, the receipt image you choose to upload) is transferred to that provider solely to process your request.

These models can make mistakes: you should not treat the assistant's responses or the automatic receipt extraction as definitive information without reviewing it.

6.1 Artificial intelligence agents that you connect

In addition to the built-in assistant, the Service lets you generate access tokens from your profile so that an external artificial intelligence agent —whichever you choose and contract on your own— can query your Service data and, if you grant it that permission, act on it on your behalf. By using this feature you accept that:

• It is the authorised exception to the prohibition on transferring access to your account (section 5), and the only one. Enabling it does not authorise any other form of third-party access.
• Permissions are granted one by one and you choose them. The agent can never do more than you yourself could: it inherits your plan limits, your data scope and your authorisations, and only within what you have marked for it.
• You are answerable for what the agent does within those permissions. The actions it performs —creating, modifying or deleting information— are treated as yours for all purposes, exactly as if you had carried them out yourself from the app.
• The token is a credential and you must keep it as such: it is shown only once, it is equivalent to a key to your account with the scope you gave it, and creating it requires re-entering your password. If you suspect it has leaked, revoke it from your profile; changing your password revokes them all at once.
• The relationship with the agent's provider is yours: we do not choose it or contract it, we are not answerable for what it does with the data it receives, and we are not party to the terms you agreed with it. The details are in the Privacy Policy.

7. User data

The financial data you enter (expenses, income, debts, items, tags, merchants, amounts) is yours. ControlarGastos:

• Does not share it with third parties for commercial purposes.
• Does not use it to train artificial intelligence models.
• Does not publish it or aggregate it for external analysis.

The specific processing is governed by the Privacy Policy.

8. Neighbours' community mode: controller and processor

When the neighbours' community mode is used, the homeowners' association —represented by its president or board— enters personal data of the neighbours into the Service (identification, dwelling, coefficient and fees) and uploads documents (minutes, budgets, notices of meeting) that may contain third-party data. In respect of that data and those documents:

• The homeowners' association is the data controller (art. 4(7) GDPR): it decides what data it enters, for what purpose and which documents it uploads, and it is responsible for having a valid legal basis to do so.
• ControlarGastos acts as the data processor (art. 28 GDPR): it processes that data solely on behalf of the community and in accordance with its instructions, for the purpose of providing the Service.
• ControlarGastos remains the controller of the account data of each registered user (email, name and credentials), processed in accordance with the Privacy Policy.

As data processor, and in accordance with article 28(3) GDPR, ControlarGastos undertakes to:

• Process the data only on the instructions of the community and not use it for its own purposes.
• Ensure the confidentiality of the persons authorised to process the data.
• Apply the appropriate technical and organisational security measures described in the Privacy Policy.
• Engage only the sub-processors already listed in the Privacy Policy, subject to the same data protection obligations.
• Assist the community, as far as possible, in handling requests to exercise rights submitted by the neighbours.
• Delete or return the community's data and documents when the provision of the Service ends, unless there is a legal obligation to retain them.
• Document the instructions that affect the existence of the community's data. In particular, archiving a community, restoring it and permanently deleting it are recorded with evidence of who ordered them, in what role, when, whether the copy of the data was delivered to them and what they were warned about, so that we can demonstrate to the community that we acted on its instruction. That record is kept even after the community's data has been deleted, and its contents are detailed in the Privacy Policy.

Whoever orders a community to be archived must re-authenticate with their password and accept a responsibility statement declaring that they act with the community's authorisation. The Service does not verify the community's internal resolutions —it is neither its place nor within its means to do so—: it acts on the instruction of whoever holds its legal representation, and archiving is reversible by any member during the grace period stated in the notice itself.

The president or board of the community undertakes, in turn, to enter only the necessary data, to inform the neighbours of the processing and to have a valid legal basis —such as board resolutions— for the information it manages through the Service.

9. Suspension and cancellation

You can request the cancellation of your account at any time from within the Service itself or by writing to [email protected]. After cancellation we will keep your data for a grace period of 30 days in case you decide to reactivate the account; once that period has elapsed it will be permanently deleted.

Before cancelling, we recommend that you export the information you want to keep: from your profile, the export your data option immediately downloads a JSON file with everything you have recorded, with no need to ask us for it (section 7.3 of the Privacy Policy).

If you are the president of a neighbours' community, cancellation is put on hold until you transfer the presidency to another member or archive the community: removing your account would leave the community with nobody to administer it. The Service tells you so when you try, and both routes are in your hands, with no need to write to us.

The provider may suspend or close accounts that breach these Terms, that compromise the security of the Service or that are used for unlawful activities, notifying the user where possible and respecting legally recognised rights.

10. Limitation of liability

The Service is offered "as is" to the extent permitted by law. It does not constitute accounting, tax, legal or financial advisory services. The provider is not liable for:

• Accounting, tax or legal decisions based on the Service's calculations without verification by a professional.
• Indirect losses, loss of profit or loss of opportunity.
• Occasional unavailability of the Service or outages attributable to external providers.

The foregoing applies without prejudice to the mandatory rights recognised to consumers under the applicable legislation.

11. Changes to the service and to the terms

The provider may modify the Service (add, remove or change features) and these Terms to adapt them to the evolution of the product, the applicable regulations or operational decisions. When the changes are substantial they will be communicated with reasonable notice by email or via a prominent notice within the Service.

12. Applicable law and jurisdiction

These Terms are governed by Spanish law. For the resolution of any dispute the parties submit to the courts and tribunals that have jurisdiction under the applicable procedural rules, respecting the mandatory jurisdiction rules applicable to consumers.