We do not sell your data, we do not share it with third parties for marketing, and we do not hand it to anyone who simply asks for it. The only situation in which we provide data about you to an authority is when a valid legal order under Dutch or EU law requires it, and even then we provide only what that order covers.
This page explains when that could happen, what we do when it does, and what data would be involved.
No proactive reporting
Gylder is not a bank or a payment institution, so it has no duty to report your finances to anyone on its own initiative. Your net worth overview in Gylder is for you, and it is not passed on to the tax authorities or any other body as a matter of routine.
What happens with a legal order
If a valid order under Dutch or EU law reaches us, we review it with our legal team before we act on it. We comply only with what the order actually covers and provide nothing beyond that, so a request about one account or one period does not lead to a wider disclosure.
We tell you
We notify you when we receive a request for your data, unless the law or an order forbids us from doing so. That way you know what has been asked and can take steps yourself if you disagree with it.
The US question
Our hosting provider is US-owned, which raises a fair question about US law. Our privacy policy answers it as follows:
AWS is a subsidiary of Amazon.com, Inc., a US-based company. Under the US CLOUD Act, US law enforcement could theoretically request data from AWS. However, all financial data stored in Gylder is encrypted with per-user keys managed through AWS KMS, so access to the stored database alone does not reveal your financial information. Decryption requires a separate, separately audited key service, as described in section 3.
What we would hand over
If we are ever required to provide data, it is the same data you can download yourself from Settings at any time, so you can see what it contains.
The full version
This page explains our approach in plain language. The complete and binding description of what we store, who we work with and how your data is protected is in our privacy policy.