Privacy Policy

Finvvy is an early-stage product designed to help founders understand and act on important business signals to sustain growth. Finvvy reads the business data you connect and enter, surfaces insights about what may require attention, and helps you decide what to do next.

This Privacy Policy describes how we collect, use, share, and protect data when you use Finvvy.

This Policy applies to our website, application, and all related services (collectively, the "Service"). By using the Service, you consent to the practices described in this Privacy Policy.

1. What We Collect

Your account. Name, email, company name, password (hashed), and basic login logs.

Connected accounts. When you connect an account through Plaid, or forward your bank's transaction alerts to us, we receive the merchant name, amount, date, description, institution, card type, and last four digits.

We never see your bank login or full account numbers. You enter those with Plaid directly.

Your decisions and actions. The figures you enter, the milestones and targets you set, the progress and outcomes you log, the transaction categories you confirm or correct, and the messages you send in chat.

2. How We Use It

We use data you provide or connect to Finvvy to surface signals about your business, monitor milestones and progress, categorize transactions, improve accuracy based on your feedback, generate AI-powered responses, and operate the Service.

We may access your account data when reasonably necessary to provide support, investigate system errors, diagnose problems, or improve the Service.

We do not sell your data or use it for third-party advertising.

3. Who We Share It With

We share your data with service providers who help us operate the Service, including account connection (e.g. Plaid), AI processing (e.g. Anthropic), hosting, and email. We also share data with legal authorities if required by law.

Transaction details and chat messages are sent to Anthropic's API, where under Anthropic's commercial terms they are not used to train their models by default.

A current list of subprocessors is available on request.

4. Data Retention

We keep your account and transaction data for as long as your account is active.

When you delete your account, we remove your data from the live system within 60 days. Backups containing your data are purged within 90 days. Forwarded emails are retained by Postmark for 45 days.

5. Security

Data is encrypted in transit and passwords are hashed. Every query is scoped to your company, so your data is never returned to another user. Sessions expire after inactivity.

No system is 100% secure, and you are responsible for safeguarding your login credentials. In the event of a data breach, we will notify affected users without undue delay, as required by applicable law.

6. Changes to This Policy

We may update this policy. If we make significant changes, we will notify you by email or in the app. The date of the last update is shown below.

7. Contact

privacy@finvvy.com

Last updated: July 27, 2026