Your data, plainly.

• Your account: email address and a password, stored only as a one-way hash (bcrypt) — nobody, including us, can read it.
• Bank SMS you forward: from each message DUERO extracts the card's last 4 digits, amount, currency, date, merchant and available balance. These details are what your dashboard is built from.
• Statement emails you forward: from each statement PDF DUERO extracts the summary (balance, due amount, minimum payment, due date) and the transaction lines.
• Card details you enter: card name, last 4 digits, credit limit, and any offers or balance-transfer terms you add.
• Statement password details (optional): most banks lock statement PDFs with a password built from a formula, such as your date of birth or the last digits of your mobile number. If you provide these, DUERO uses them to open your statements. Your date of birth, mobile number and any statement password you enter are stored encrypted (AES-256).

DUERO does not collect your bank login, OTPs, PINs, CVV or full card numbers.

• Original SMS text and statement PDFs are kept for 7 days by default, so a reading problem can be fixed and the message re-processed. You can change this to 2 days or 0 days (never kept) at any time in the Message Log page. A daily job deletes them once the period ends.
• The extracted details (transactions, balances, dues) are kept while your account is active, because they are your card history.
• Backups of the database are taken daily and only the most recent 7 are kept.

Only you can see your data in the app — every request is checked against your login. While an original message is still within its retention period, the DUERO team may look at it to fix a reading problem; after that it no longer exists.

DUERO runs on established cloud providers, which process data only to provide their service: hosting and database, the website, email routing, and sending notification emails (plus WhatsApp alerts if you turn them on). Your data is never sold, rented, or used for advertising.

• Everything travels over encrypted connections (HTTPS).
• Sign-in uses a secure, http-only cookie; it is DUERO's only cookie, and there are no advertising or tracking cookies.
• Your personal SMS link is a long random token, and forwarded email is accepted only from your own verified address or known bank senders.
• Sensitive fields (date of birth, mobile number, statement passwords) are encrypted at rest.

• Stop sending data at any time by turning off SMS forwarding on your phone and the email forwarding rule.
• Change how long raw messages are kept (7, 2 or 0 days) in the Message Log page.
• Download everything DUERO holds about you as CSV files from Settings → Your data.
• Delete your account and all its data yourself in Settings → Your data, or by emailing admin@duero.club from your registered address. Everything is removed from the live system immediately; copies in backups disappear as those backups roll off within 7 days.

DUERO is in beta and this page will be updated as the product changes. For any privacy question, email admin@duero.club.