Privacy Policy

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

• Account information: name, email address, and password when you register
• Payment information: credit or debit card details processed by Stripe (we do not store full card numbers)
• Profile preferences: notification settings, sweep settings, and financial goals you configure
• Communications: messages you send to us via email or support channels

1.2 Financial Data (via Plaid)

To provide our core service, we connect to your financial accounts through Plaid Technologies, Inc. With your explicit authorization, we collect:

• Bank account balances and transaction history
• Investment account holdings, positions, and performance data
• Credit card transaction data
• Account metadata (institution name, account type, account number last four digits)

We do not collect or store your online banking credentials. Authentication is handled directly by Plaid using bank-grade encryption. You can revoke Plaid access at any time through the Connections page in the app or by contacting us.

1.3 Information Collected Automatically

• Log data: IP address, browser type, operating system, pages visited, time and date of visits
• Device information: device type, unique device identifiers
• Usage data: features used, actions taken, time spent, click patterns within the app
• Cookies and similar technologies: session cookies required for authentication and preference cookies for settings

1.4 Information from Third-Party Services

• Market and news data from Polygon.io for portfolio intelligence features
• Payment processing data from Stripe for subscription management

1.5 What we store from your conversations

Finnus stores the text of every reply you write to a brief and every message you send to Ask Finn. We store this so Finnus can become more useful to you over time, surfacing things you have named for yourself and helping you track how your thinking about money evolves.

We process this text using OpenAI to extract structured records such as commitments and goals. The structured records are stored alongside the original text.

You control all of this. In Settings under Memory and Record, you can pause storage, see everything stored, export it, or delete it entirely. Deletion is permanent and immediate.

We never share your conversation text or extracted records with third parties beyond OpenAI for processing. We do not sell this data.

2. HOW WE USE YOUR INFORMATION

2.1 Providing the Service

• Generating your Daily Brief, activity signals, trajectory projections, and cash flow analysis
• Building and maintaining your behavioral financial model to improve intelligence over time
• Powering Ask Finn conversational AI responses grounded in your financial data
• Delivering weekly snapshot emails and in-app notifications
• Processing payments and managing your subscription through Stripe

2.2 Improving and Developing the Service

• Analyzing usage patterns to understand which features are most valuable
• Improving the accuracy of signals, projections, and AI-generated narratives
• Debugging errors and resolving technical issues
• Developing new features based on aggregate usage insights

2.3 Communication

• Sending transactional emails (account confirmation, password reset, subscription receipts)
• Sending your weekly financial snapshot email (opt-out available in settings)
• Notifying you of significant account events, milestone alerts, or unusual activity
• Responding to your support requests

2.4 Legal and Safety

• Complying with applicable laws and regulations
• Detecting and preventing fraud, abuse, or security incidents
• Enforcing our Terms of Service

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal data. We do not share your individual financial data with advertisers. We share information only in the following limited circumstances:

3.1 Service Providers

We share data with trusted third-party service providers who help us operate the Service, including providers for:

• Financial account connectivity and data aggregation (including Plaid Technologies, Inc.)
• Payment processing and subscription management (including Stripe, Inc. — see stripe.com/privacy)
• AI language model processing for generating financial intelligence
• Database hosting and authentication
• Application hosting and deployment
• Email delivery
• Financial news and market data
• Error monitoring and performance tracking

All service providers are contractually prohibited from using your data for their own purposes.

3.2 Business Transfers

If Finnus is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Finnus, our users, or the public.

3.4 Aggregated and De-identified Data

We may share aggregated, anonymized data that cannot reasonably be used to identify you. This data is never linked to individual accounts.

4. DATA RETENTION

• Account data: retained while your account is active and for 30 days after deletion
• Financial transaction data: retained for up to 24 months to power behavioral modeling
• Usage and engagement data: retained for 12 months
• Billing records: retained for 7 years as required by tax regulations
• Support communications: retained for 2 years

After the applicable retention period, your data is securely deleted or anonymized.

5. DATA SECURITY

We implement industry-standard security measures:

• Encryption in transit using TLS 1.2 or higher
• Encryption at rest for all sensitive data
• Access controls limiting employee access to user data on a need-to-know basis
• Regular security reviews and vulnerability assessments
• Secure authentication through Supabase

No method of transmission over the Internet is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

6. YOUR RIGHTS AND CHOICES

6.1 Access and Portability

You may request a copy of the personal data we hold about you by contacting hello@finnus.ai. We will respond within 30 days.

6.2 Correction

You may update your account information directly in app settings. For other corrections, contact hello@finnus.ai.

6.3 Deletion

You may request deletion of your account and personal data at any time by:

• Going to Settings > Account > Delete Account
• Emailing hello@finnus.ai with subject line "Delete My Account"

We will delete or anonymize your personal data within 30 days of a verified request.

6.4 Opt-Out of Communications

• Weekly snapshot emails: unsubscribe via the link in any snapshot email or in Settings > Notifications
• Transactional emails cannot be opted out of as they are required for account operation

6.5 Revoking Plaid Access

You may disconnect any linked financial account at any time through the Connections page. Revoking access stops future data collection from that account.

6.6 California Residents (CCPA)

California residents have additional rights including the right to know, right to delete, and right to opt-out of sale (we do not sell personal data). Contact hello@finnus.ai to exercise these rights.

6.7 European Residents (GDPR)

EEA residents have rights under GDPR including access, rectification, erasure, restriction, data portability, and the right to object. Our legal basis for processing is contract performance and legitimate interests. Contact hello@finnus.ai to exercise your rights.

7. COOKIES

• Essential cookies: required for authentication. Cannot be disabled.
• Preference cookies: remember your settings
• Analytics cookies: anonymized usage data

We do not use cookies for advertising or cross-site tracking.

8. CHILDREN'S PRIVACY

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, contact hello@finnus.ai immediately.

9. CHANGES TO THIS POLICY

When we make material changes we will:

• Post the updated policy with a new "Last Updated" date
• Send an email notification to your registered email address
• Display a prominent notice in the app

10. FINANCIAL DATA DISCLAIMER

Finnus provides financial information and education only. We are not a licensed investment advisor, broker-dealer, bank, or financial institution. All financial projections are illustrative only and are not predictions or guarantees of future results. For major financial decisions, consult a licensed professional.

11. CONTACT US

Finnus, Inc.
Email: hello@finnus.ai
Website: finnus.ai

We will respond to privacy inquiries within 30 days.

Governed by the laws of the United States.