Hermes Finance is a private, self-hosted application used by one household to track its own bank balances and transactions. It is not a product, not a service offered to anyone else, and has no users beyond the two people named below. It is not operated commercially and processes no third party's data.
Two people: Koen Michiels, and his partner Lenka Michiels in respect of two Revolut accounts held in her own name. Each account is connected only with the account holder's own explicit consent, given through that person's own bank login. No one else's data is processed.
Account information is retrieved through Enable Banking, a licensed account information service provider (AISP) operating under PSD2, acting on the explicit consent given by each account holder at their own bank. The data retrieved is:
No credentials are ever seen or stored by this application. Authentication happens at the bank's own website, and the application holds only a time-limited access token issued after that authentication. Under PSD2 that consent expires periodically and must be renewed by the account holder in person; it can be withdrawn at any time, either at the bank or through Enable Banking, and withdrawal stops all further access immediately.
Solely for the household's own financial overview: net-worth tracking over time, spending categorisation, and monitoring that each bank feed is still delivering data. There is no other purpose. The legal basis is the explicit consent of each account holder.
On self-hosted hardware in the controller's own home, in a PostgreSQL database that is not reachable from the public internet. The data is retained for as long as it is useful for historical comparison, and is deleted on request by the account holder.
No one. The data is not sold, rented, published, or transferred to any third party. There is no advertising, no analytics, no tracking, and no profiling. The only external party involved in the flow is Enable Banking, which acts as the regulated intermediary retrieving the data from the banks; its own handling is governed by Enable Banking's privacy policy.
This page is a static document. It sets no cookies, loads no external resources, runs no scripts, and collects nothing about you for visiting it.
Each account holder may at any time ask what is held, ask for it to be corrected or erased, ask for a copy of it, or withdraw consent — by writing to the address above, or by revoking the connection directly at their bank. Anyone who believes their data has been handled improperly may complain to their national data protection authority.