Privacy Policy

Introduction

At Finovu ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management platform and services.

Information We Collect

Personal Information

• Name and contact information (email address, phone number)
• Account credentials and authentication information
• Financial preferences and investment interests
• Portfolio information you choose to share

Usage Information

• How you interact with our platform and services
• Device information and browser type
• IP address and location data
• Cookies and similar tracking technologies

How We Use Your Information

• Provide and maintain our financial management services
• Send you market alerts and financial insights
• Improve our platform and develop new features
• Communicate with you about your account and our services
• Ensure security and prevent fraud
• Comply with legal obligations

Information Sharing

We do not sell personal information. We disclose only the information needed to operate Finovu, comply with law, protect the service, or act on your instructions. Our current provider categories include:

• Cloud application and storage infrastructure, including Vercel, Railway, and AWS
• AI and research processing, including OpenAI, when you use Novu or research features
• Payments and subscriptions through Lemon Squeezy, Apple, or Google
• Authentication through Google when you choose Google sign-in
• Notification delivery infrastructure, including Expo and an isolated Supabase relay
• Product analytics through Vercel and, only when expressly enabled, FullStory session replay across the web experience. Form values are masked, signed-out sessions remain anonymous, and signed-in sessions are associated with an internal Finovu user ID, display name, and email address. Finovu does not send financial preferences, payment state, or URL query strings as FullStory custom properties
• Market, company, event, and news-data providers used to answer a request
• Authorities or advisers when disclosure is legally required or needed to protect rights

Data Security

We use administrative and technical safeguards designed to protect your information. No online service can promise absolute security. Safeguards used by Finovu include:

• Encrypted network transport
• Authentication, access controls, and session revocation
• Provider-managed infrastructure controls and restricted operational access
• Logging and monitoring designed to avoid storing raw credentials or payment secrets

Your Rights

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete information
• Delete your account and the associated private product data
• Opt-out of marketing communications
• Request data portability

See the Finovu account-deletion page for the in-app path, an alternative verified request channel, and a precise description of deleted and retained records.

Retention and Account Deletion

We keep account data while your account is active and as needed to provide requested services. An authenticated deletion request revokes account access and removes private database records. Private object-storage cleanup may finish asynchronously; Finovu reports that state as pending until it is verifiably complete.

We may retain provider transaction identifiers and limited tax, fraud-prevention, dispute, and security audit records when required. These records are kept only for the applicable statutory, chargeback, fraud-prevention, dispute, or security period, then deleted or anonymized. The exact period depends on record type and jurisdiction.

Account deletion does not cancel a subscription billed by Apple, Google, Lemon Squeezy, or another payment provider. Cancel that subscription with the provider if you do not want it to renew.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie settings through your browser preferences.

Third-Party Services

Our platform may integrate with third-party financial data providers and services. These integrations are governed by their respective privacy policies, and we encourage you to review them.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: