Privacy Policy | Finazca

1. Introduction

Finazca ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cash flow forecasting and invoicing platform.

2. Information We Collect

Account Information

Name and email address
Password (stored as encrypted hash)
Company name (optional)
Phone number and address (optional)

Business Data

Client contact information you enter
Invoice details and payment records
Organization and team member information

Usage Data

Pages visited and features used
Browser type and device information
IP address and location data

3. How We Use Your Information

To provide and maintain the Service
To process transactions and send related information
To send administrative notifications (e.g., invoice reminders)
To improve the Service and develop new features
To detect and prevent fraud or abuse
To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

Payment processors: Stripe, for payment processing (subject to Stripe Privacy Policy)
Analytics: PostHog (anonymized usage data, only if configured)
Error tracking: Sentry (only if configured)
Legal requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures including:

Encryption in transit (HTTPS/TLS)
Password hashing with bcrypt
JWT-based authentication with expiry
Database access restricted by user ID
Regular security audits

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where required by law.

7. Your Rights (PDPA/GDPR)

You have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data
Portability: Request your data in a machine-readable format
Objection: Object to processing of your personal data
Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@finazca.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies unless you have analytics configured (PostHog).

9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

12. Contact Us

For privacy-related inquiries, contact us at privacy@finazca.com.