Your privacy is fundamental to our mission. This comprehensive privacy policy explains how we collect, use, protect, and share your personal information in compliance with GDPR, CCPA, and other privacy regulations.
We are committed to protecting your privacy through transparent practices, robust security measures, and respect for your privacy rights.
We collect only the data necessary to provide our services and process it for legitimate business purposes.
Privacy considerations are integrated into every aspect of our system architecture and development processes.
Clear information about data processing with granular controls for users to manage their privacy preferences.
Full support for individual privacy rights including access, rectification, erasure, and data portability.
We collect only the data necessary to provide our financial reconciliation services. All data collection is transparent, lawful, and limited to legitimate business purposes.
Bank account information, transaction data, and financial records
Core reconciliation services and financial analysis
7 years (regulatory requirement)
Contract performance and legitimate interest
Name, email address, phone number, and authentication credentials
Account management, authentication, and customer support
Account lifetime + 3 years
Contract performance and consent
System logs, access patterns, and feature usage analytics
Service improvement, security monitoring, and performance optimization
2 years
Legitimate interest and consent
IP addresses, device information, and browser data
Security monitoring, fraud prevention, and service delivery
1 year
Legitimate interest and legal obligation
We share data only when necessary and with appropriate safeguards. All data sharing is conducted under strict contractual and legal protections.
Trusted third-party vendors who assist in service delivery
Data processing agreements, security assessments, and regular audits
Banks, payment processors, and financial institutions
Encrypted connections, minimal data sharing, and regulatory compliance
Government authorities and regulatory bodies when legally required
Legal review, data minimization, and appropriate legal basis
Comprehensive security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
You have comprehensive rights regarding your personal data. We provide easy-to-use tools and processes to exercise these rights.
Request a copy of all personal data we hold about you
Submit request through your account or contact our privacy team
30 days maximum response time
Correct inaccurate or incomplete personal data
Update information directly in your account or contact support
Immediate for account updates, 30 days for complex requests
Request deletion of your personal data (right to be forgotten)
Submit deletion request through your account or privacy team
30 days maximum, subject to legal retention requirements
Receive your data in a structured, machine-readable format
Request data export through your account settings
30 days maximum response time
Limit how we process your personal data
Contact our privacy team with specific restrictions
30 days maximum response time
Object to processing based on legitimate interests
Submit objection through your account or privacy team
30 days maximum response time
Our dedicated privacy team is available to address any questions about your data, privacy rights, or this policy. We respond to all privacy inquiries within 30 days.
privacy@finacly.ai
dpo@finacly.ai