FinTeam Privacy Policy

Last updated: 2026-06-24

This Privacy Policy describes how FinTeam Business Consulting ("FinTeam", "we") collects, uses, stores, and shares information when you use the FinTeam CFO Platform ("Service").

1. Information we collect

Account info: name, email, role (admin / finteam staff / client) — provided when an account is provisioned.
Financial data from connected accounts: when you connect QuickBooks Online, Harvest, or similar, we receive and store transactional data (general-ledger entries, profit-and-loss summaries, time entries, etc.) for the periods you authorize.
Uploaded files: CSV, XLSX, PDF (industry reports, time exports, supporting documents) you upload to the Service.
Usage logs: pages visited, actions taken, IP, browser, timestamps — used for security monitoring and support.

Cookies, local storage & tracking

We use only essential, first-party browser storage: a secure session token (an ft_session cookie / local-storage entry) to keep you signed in, plus local preferences such as theme, last-opened panel, and "remember me". We do not use third-party advertising or analytics cookies, and we run no cross-site trackers. You can withdraw consent at any time by clearing this site's browser storage; the in-app cookie notice will then reappear.

2. How we use it

To provide the Service: build budgets, variance reports, cash-flow projections, Drake Check health scores, and engagement playbooks. To send transactional emails (report deliveries, notifications). To diagnose and improve the Service.

3. AI processing

Some features (industry-report extraction, AI advisor commentary) send relevant data to Anthropic's Claude API for inference. Anthropic processes the data only to fulfill the request and does not retain it for model training, per Anthropic's enterprise terms. We do not feed financial data into public models.

4. Sub-processors

Railway — application + database hosting (US data centers)
Anthropic — AI inference (per request, not retained)
Resend — transactional email delivery
Intuit (QuickBooks Online) — read-only data source on your authorization
Harvest — read-only data source on your authorization

5. Data security

Encryption in transit (HTTPS / TLS), encryption at rest (Postgres on Railway), session-based authentication with rotating tokens, role-based access control. Multi-factor authentication available on FinTeam staff accounts.

6. Data retention & deletion

Synced financial data is retained for the duration of the engagement plus 7 years for tax-record purposes (or as required by law), then deleted. You may request immediate deletion of your account and associated data by emailing hello@thefinteam.com; we will fulfill within 30 days unless retention is legally required.

7. Your rights

You may request export of your data, correction of inaccurate data, or deletion. Contact us at the email below.

8. Children

The Service is not directed to children under 13. We do not knowingly collect data from children.

9. Changes

We may update this Policy; material changes will be announced in-app.

10. Contact

Privacy questions: hello@thefinteam.com