Last updated: May 8, 2026

Executive summary

This Privacy Policy explains how UAB “Fiatum” collects, uses, stores, shares, and protects personal data when you visit the website, request a demo, communicate with Fiatum, or use the Fiatum platform. It also explains when Fiatum acts as a controller and when it generally acts as a processor on behalf of its customers, the legal bases relied upon, how long data is kept, what rights individuals have, and how complaints can be made.

Who we are.

UAB “Fiatum” is a company registered in Lithuania with company ID 305998680 and registered address Vilnius, Šaltkalvių g. 64-23, LT-02175. Unless this Policy states otherwise, Fiatum is the controller of personal data processed through the website, sales and demo workflows, account administration, billing, security, and related business operations.

Contact details.

Company: UAB “Fiatum”
Company ID: 305998680
Registered and operating address: Vilnius, Šaltkalvių g. 64-23, LT-02175, Lithuania
Email: contact@fiatum.io
Phone: +37129396619

Scope of this Policy.

This Policy applies to personal data processed through the Fiatum website, contact forms, demo scheduling, marketing communications, customer onboarding, support, account administration, billing, security operations, and business relationships. It also explains Fiatum’s role in relation to customer platform data, but customer-uploaded or customer-connected data may additionally be governed by a customer agreement, DPA, or service order.

Controller and processor roles.

Fiatum generally acts as a controller for personal data about website visitors, demo requesters, leads, customers’ representatives, billing contacts, support contacts, and users of the website. Fiatum generally acts as a processor when it processes customer platform data on documented instructions from a customer that determines the purposes and means of that processing. In those processor contexts, the relevant customer remains responsible for its own lawful basis, data subject notices, and instructions to Fiatum.

Categories of personal data.

Depending on how you interact with Fiatum, the personal data processed may include:

• identity and contact data, such as name, business email, telephone number, company name, and job title;
• account and authentication data, such as user identifiers, role settings, login records, and security credentials;
• commercial data, such as contract details, billing contacts, invoice records, payment status information, and onboarding records;
• communications data, such as emails, support tickets, call notes, demo requests, meeting records, and response history;
• platform and usage data, such as IP address, device and browser information, log data, timestamps, pages viewed, actions taken in the product, audit trail entries, and service diagnostics;
• customer content and connected-source data that users upload, submit, or connect to the platform;
• cookie and similar technology data, including preference, analytics, session, and integration-related identifiers.

How we collect personal data

Fiatum may collect personal data directly from you, from your employer or organization, from customer administrators, from integrations and connected systems you authorize, from support and sales interactions, and automatically through website, platform, and security logs.

Purposes and legal bases.

Fiatum may process personal data for the following purposes and on the following legal bases:

• to respond to demo requests, contact requests, and business inquiries;
• to negotiate, conclude, and perform contracts;
• to create and administer accounts and user access;
• to provide, secure, support, and improve the platform;
• to process payments, invoices, and commercial administration;
• to maintain records, audit trails, and incident response capabilities;
• to send service messages, transactional updates, and support communications;
• to send marketing communications where permitted by law or where consent has been obtained;
• to comply with legal, tax, accounting, security, and regulatory obligations.

Where required, Fiatum relies on one or more of the following legal bases: performance of a contract, steps taken before entering into a contract, legitimate interests, legal obligation, and consent. Where consent is used, it can be withdrawn at any time without affecting prior lawful processing.

Legitimate interests.

Where Fiatum relies on legitimate interests, those interests may include running a secure and reliable business platform, preventing fraud and abuse, maintaining internal administration, managing customer relationships, improving the service, and defending or establishing legal claims. Fiatum will not rely on legitimate interests where those interests are overridden by the rights and freedoms of the data subject.

AI-assisted features and automated processing.

Fiatum may use rule-based and AI-assisted tools to classify transactions, support reconciliation, surface anomalies, generate summaries, suggest workflow actions, and improve reporting. Unless explicitly stated otherwise in a customer configuration or service description, these features are intended to support human review and operational decision-making. If Fiatum or a customer enables solely automated decisions that produce legal or similarly significant effects for an individual, such processing will only be carried out where there is a lawful basis and the safeguards required by applicable law are provided.

Recipients and third parties.

Fiatum may share personal data with:

• hosting, infrastructure, security, backup, and cloud service providers;
• communications, CRM, support, productivity, and collaboration providers;
• payment, invoicing, accounting, and banking service providers;
• implementation, integration, and subcontracted service providers working on Fiatum’s behalf;
• professional advisers, auditors, insurers, and legal counsel;
• competent authorities, regulators, courts, or law enforcement where legally required;
• successors, acquirers, or counterparties in a merger, financing, sale, or restructuring, subject to appropriate confidentiality protections.

Where third parties process personal data for Fiatum, Fiatum will require appropriate contractual safeguards. Where Fiatum processes customer data on behalf of a customer, additional processor terms or a DPA may apply.

International transfers

If personal data is transferred outside the EU or EEA, Fiatum will use a valid transfer mechanism under applicable law, such as an adequacy decision, Standard Contractual Clauses, or another permitted safeguard, together with supplementary measures where required. Individuals may request further information about the transfer mechanism relevant to their data.

Retention.

Fiatum keeps personal data only for as long as necessary for the purposes for which it was collected and to meet legal, contractual, security, and recordkeeping obligations. Retention periods may depend on the type of data and the relationship with Fiatum. In particular:

• inquiry and demo data is kept for the time needed to respond, follow up, and document the business relationship;
• account, contract, and billing data is kept for the contract term and any applicable legal or limitation periods;
• support records and audit/security logs are kept for the period needed to support the service, investigate incidents, and demonstrate compliance;
• marketing consent records are kept for the period needed to demonstrate and manage consent choices;
• customer platform data processed as a processor is retained according to the customer contract, customer instructions, and applicable backup or deletion cycles.

Where retention is no longer necessary, data will be deleted, anonymized, or securely archived.

Security

Fiatum applies appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. Depending on context, these measures may include access controls, least-privilege design, authentication controls, encryption, logging, monitoring, pseudonymization, secure development practices, backups, and incident response processes. No system can guarantee absolute security, but Fiatum evaluates security measures on a risk-based basis.

Your rights

Subject to applicable law, you may have the right to:

• be informed about the processing of your personal data;
• obtain access to your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure in specified circumstances;
• request restriction of processing in specified circumstances;
• object to processing, including processing for direct marketing;
• receive personal data in a portable format where applicable;
• withdraw consent where processing is based on consent;
• not be subject to unlawful solely automated decision-making producing legal or similarly significant effects.

Fiatum will respond to rights requests without undue delay and, in general, within one month, subject to any lawful extension.

How to exercise your rights

To exercise your rights, contact Fiatum at contact@fiatum.io. Fiatum may request information necessary to verify identity and properly scope the request.

Complaint procedure

If you believe Fiatum has processed your personal data unlawfully, you may contact Fiatum first at contact@fiatum.io so the issue can be reviewed. You also have the right to lodge a complaint with the Lithuanian supervisory authority, the State Data Protection Inspectorate, especially in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

Cookies and similar technologies

Fiatum uses cookies and similar technologies for website functionality, security, preferences, analytics, and, where enabled, marketing. Strictly necessary technologies are used to provide the site or service requested by the user. Non-essential cookies and similar technologies are used only where the applicable consent standard has been met. More detail is provided in the Cookie Policy.

Children.

The Fiatum website and services are intended for business and professional use and are not directed to children. Fiatum does not knowingly collect personal data directly from children.

Changes to this Policy.

Fiatum may update this Privacy Policy from time to time. The current version will be posted on the website with an updated “Last updated” date. Where required, Fiatum will take additional steps to notify users of material changes.