Privacy Policy

FinForensics (“FinForensics”, “we”, “us”) is operated by Empowered Humanity, Inc., a Colorado corporation. This policy explains what data we collect, where it goes, and what control you have over it. It covers finforensicsos.com and the FinForensics application.

The short version: we collect your financial data so the product can categorize, reconcile, and report on it for you. We do not sell it, we do not use it for advertising, and we do not use it to make lending or credit decisions about you.

1. Information we collect

Account information. Your name, email address, and authentication credentials when you register.

Financial account data. When you connect a bank, credit card, or payment account, we receive transaction history (date, amount, description, merchant, category), account balances, account type, and the institution name and account mask (for example, the last four digits). We do not receive or store your online banking username or password.

Documents you upload. Bank and credit card statements, tax documents, and other financial records you choose to provide, along with the text extracted from them.

Usage and technical data. Log data, IP address, browser and device information, and actions taken in the application, used to operate and secure the service.

Payment information. If you purchase credits or a subscription, payment is processed by Stripe. We receive confirmation and billing metadata. We never receive or store your full card number.

2. How we use it

• Import, categorize, and deduplicate your transactions
• Reconcile transactions against statements and detect gaps or discrepancies
• Generate profit-and-loss statements, tax drafts, reconciliation reports, and analyses you request
• Maintain the provenance record that lets each figure trace back to its source document or transaction
• Authenticate you, provide support, and secure the service against fraud and abuse
• Meet legal, tax, and accounting obligations

We do not sell your personal or financial information. We do not share it with data brokers, use it for behavioral advertising, or use it to make credit, lending, insurance, or employment decisions about you.

3. Bank connections and Plaid

We use Plaid Inc. to connect to your financial accounts. When you link an account, you enter your credentials directly with Plaid — not with us. Plaid returns an access token and the transaction and balance data you authorized. We store the token in encrypted form and use it only to retrieve that data.

Plaid’s handling of your information is governed by its own policy. Please review the Plaid End User Privacy Policy. Where we use MX Technologies for institutions Plaid does not support, the same arrangement applies.

Access is read-only. We cannot move money, initiate transfers, or make payments from a connected account. You can disconnect any account at any time from your dashboard, which revokes our access and stops further syncing.

4. Automated processing and AI

Two parts of the product send data to third-party processors, and we want to be explicit about it:

• Document text extraction. Statements and financial documents you upload may be processed by Microsoft Azure AI Document Intelligence to convert them into machine-readable text.
• Transaction categorization and analysis. Transaction descriptions and merchant names may be sent to OpenAI, Anthropic, or Google to classify them and assist with analysis.

We send the minimum needed for the task and do not send your credentials or access tokens. These providers act as processors on our behalf under their enterprise terms and are not permitted to use your data to train their models. If you would prefer your data not be processed this way, contact us — certain features depend on it and we will tell you which.

5. Who we share data with

We share data only with service providers who help us run the product:

We may also disclose information when required by law, valid legal process, or subpoena; to protect our rights, safety, or property; or in connection with a merger, acquisition, or sale of assets — in which case we will notify you before your information becomes subject to a different policy.

6. Retention and deletion

We keep your data for as long as your account is active. Because the product is built to produce records that may be relied on for tax filings, financial reporting, or legal proceedings, historical data is retained rather than overwritten so that prior reports remain reproducible.

Disconnecting an account stops further syncing and revokes our access token; previously imported transactions remain in your ledger unless you delete them. You may request deletion of your account and associated data at any time, and we will delete it within 30 days except where we are required to retain records to meet a legal or tax obligation.

7. Security

• Access tokens are encrypted at rest
• Data is transmitted over TLS
• Data is scoped to your account; row-level access controls restrict reads to your own records
• Access to production systems is limited to personnel who need it

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your information, we will notify you as required by applicable law.

8. Your rights

You may request access to the personal information we hold about you, correct inaccurate information, request deletion, request a copy in a portable format, or withdraw consent for a connected account by disconnecting it. Depending on where you live — including under the Colorado Privacy Act and the California Consumer Privacy Act — you may have additional rights, including the right to opt out of sale or sharing of personal information. We do not sell or share personal information as those laws define it. To exercise any right, contact us using the details below.

9. Children

FinForensics is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes

We may update this policy. If we make a material change to how we handle your financial data, we will notify you by email or in the application before it takes effect. The effective date above always reflects the current version.

11. Contact

Empowered Humanity, Inc. — Longmont, Colorado, USA
Email: support@finforensicsos.com
A mailing address is available on request.

See also our Terms of Service.