Privacy Policy

1. Introduction

FinSight is an AI-powered financial analysis tool that helps business owners understand their finances and find hidden savings. This policy explains what data we collect, how we use it, and the rights you have over your information.

2. Data We Collect

• Account data — your full name, company name, email address, and country when you register.
• Financial documents — files you upload for analysis (bank statements, invoices, P&L reports, etc.).
• Payment information — processed securely by Stripe. We never store your card details on our servers.
• Usage data — analyses run, login times, and feature usage to help us improve the product.

3. How We Use Your Data

• To provide the financial analysis service you subscribed to.
• To send you account notifications, payment receipts, and product updates.
• To improve and develop the FinSight product.
• We never sell your data to third parties.

4. Document Storage and AI Processing

• Documents you upload are sent to the Anthropic Claude API for analysis.
• Documents are processed and then deleted from our servers — we do not retain your raw files.
• We do not use your financial documents to train AI models.
• Anthropic's data processing is governed by their own privacy policy at anthropic.com.

5. Data Security

• All data is encrypted in transit using TLS.
• Passwords are hashed and never stored in plain text.
• Our database is hosted on Supabase with encryption at rest.
• We follow industry-standard security practices and review them regularly.

6. GDPR Compliance

If you are located in the EU or UK, you have the right to:

• Access the personal data we hold about you.
• Request deletion of your personal data.
• Object to processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. For full details see our GDPR page.

7. Data Retention

• Account data is retained while your account is active.
• When an account is deleted, personal data is removed within 30 days.
• Analysis reports are retained for 12 months and then permanently deleted.

8. Cookies

• We use session cookies only — to keep you logged in while you use the platform.
• We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

For full details see our Cookie Policy.

9. Third-Party Services

We use the following trusted third-party services to deliver FinSight. Each has their own privacy policy.

• Stripe — payment processing
• Supabase — database hosting
• Resend — transactional email delivery
• Anthropic — AI analysis engine
• Railway — application hosting

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at the address associated with your account before the changes take effect.

11. Contact

For any privacy-related questions or requests, please contact us at [email protected].