Privacy Notice

FinLedger ("we") is the data controller for personal data processed through the FinLedger AI service. This notice describes what we collect, why, and your rights.

1. Data We Collect

• Account data: email address, login credentials, display name.
• Usage data: the tickers, financial data, and analysis modes you submit, and the resulting outputs.
• Telemetry: IP address, browser/device identifiers, timestamps, and basic usage events for security and product improvement.
• Support data: messages you send to us.
• Payment data: handled directly by Paddle (see "Sharing" below). We do not store full card details.

2. Purposes & Legal Bases

• Provide and operate the Service — performance of contract.
• Account creation, authentication, and security/fraud prevention — legitimate interests and legal obligation.
• Customer support — performance of contract and legitimate interests.
• Product analytics and improvement — legitimate interests.
• Service announcements — legitimate interests; marketing only with consent.

3. Sharing

We share personal data only with:

• Paddle.com Inc. — our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Hosting & infrastructure providers for the operation of the Service.
• AI model providers that process the inputs you submit in order to produce analysis outputs.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

4. Retention

We keep account and usage data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes. You may delete saved analyses at any time. On account closure we delete or anonymise personal data within a reasonable period.

5. Your Rights

Subject to applicable law, you have the right to access, correct, delete, restrict, port, or object to processing of your personal data, to withdraw consent, and to lodge a complaint with your local data-protection authority. UK/EEA users have rights under the UK GDPR / GDPR including these rights; we will respond within one month.

6. International Transfers

Your data may be processed outside your country of residence. Where required, we use appropriate safeguards (e.g. Standard Contractual Clauses or adequacy decisions).

7. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data.

8. Cookies

We use only essential cookies and similar storage required to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

9. Contact

To exercise your rights or for any privacy question, contact privacy@finledgerai.com.