FinautorFinautor

Legal

Privacy Policy

Last updated: September 29, 2026

1. Introduction

Finautor ("we", "our", or "us") operates the website finautor.com and the Finautor application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Research preview status: Finautor is currently operating as an AI research preview. Every account includes a free monthly usage allowance; usage beyond it is funded by optional prepaid usage packs (see our Terms of Service). We collect and process the data described below to operate, bill, and improve the Service.

Data controller: Pierre Neuman, Rue du Moulin à Papier 32, 1160 Brussels, Belgium. Contact: hello@finautor.com

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and profile picture through our authentication provider (Clerk).

Usage data: We collect information about how you interact with our Service, including chat queries, automation configurations, dashboard settings, and feature usage patterns.

Google Workspace data: If you connect your Google account through our Connectors feature, we may access data from the following Google services based on the permissions you grant:

  • Gmail (read-only access and compose) — to read and draft emails on your behalf for automation workflows.
  • Google Drive — to access and manage documents relevant to your financial workflows.
  • Google Calendar — to read and create calendar events related to financial deadlines and automations.
  • Google Sheets — to read and write spreadsheet data for financial analysis and reporting.

Microsoft 365 data: If you connect your Microsoft account through our Connectors feature, we may access data from the following Microsoft services based on the permissions you grant:

  • Outlook Mail — to read and draft emails on your behalf for automation workflows.
  • Outlook Calendar — to read and create calendar events related to financial deadlines and automations.
  • OneDrive — to access and manage documents relevant to your financial workflows.
  • Excel Online — to read and write spreadsheet data for financial analysis and reporting.

Payment data: If you buy a prepaid usage pack, or make a voluntary donation via our Support Us page, we collect billing information through our payment processor, Stripe. This includes your email address, payment method details (card last four digits, expiry date), and transaction history. We do not store full card numbers — these are handled entirely by Stripe in accordance with PCI DSS standards. The same processing applies to any historical payments from prior periods, retained for the purposes described in Section 7.

Usage and billing data: To meter and bill AI usage, we record usage for each AI request or chat turn: the number of AI tokens consumed (input, output, and cache tokens), the computed cost at our published usage rates, the type of activity, and whether it was covered by your free monthly allowance or drawn from your prepaid balance. We also track your allowance utilization and prepaid-balance transactions. This data is contractual — it is the record we use to apply your allowance, charge your prepaid balance, display your usage, and reconcile payments. It reflects token counts and cost, not the substance of your chats or financial data.

Financial data: We process financial queries and analysis results. We do not store your brokerage credentials or execute trades on your behalf.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your financial queries and deliver AI-generated analysis
  • Execute automated workflows you create
  • Manage your account and provide customer support
  • Send service-related notifications (e.g., automation run results)
  • Monitor usage to enforce rate limits and prevent abuse
  • Meter AI usage, apply your free monthly allowance, and charge your prepaid balance for usage beyond it
  • Process prepaid usage-pack purchases and voluntary donations through Stripe, and reconcile payments
  • Display your usage and prepaid-balance metrics
  • Send transactional emails (usage notifications, payment receipts, research-preview notifications)

4. Google API Services — Limited Use Disclosure

Finautor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google data to provide and improve the features you explicitly request.
  • We do not transfer Google data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with adequate user notice.
  • We do not use Google data for serving advertisements.
  • We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with law, or the data is aggregated and anonymized for internal operations.

5. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including TLS encryption in transit, encrypted databases at rest, and strict access controls.

Google OAuth tokens are stored encrypted and are used solely to access the Google services you have authorized. You can revoke access at any time through the Connectors page in your Finautor settings or through your Google Account permissions.

6. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers — third-party services that help us operate (e.g., Clerk for authentication, Anthropic for AI processing, OpenAI for text embeddings, Stripe for payment processing, Cloudflare for hosting, background processing, caching and file storage, Neon for our database (hosted in Frankfurt, EU), Resend for email delivery, Sentry for error monitoring, PostHog for product analytics — processed exclusively in the EEA on PostHog's EU Cloud).
  • AI clients you connect — if you connect an external AI assistant to your Brain (Settings → Connect your Brain) with an API key or an OAuth authorisation you create, that client receives the Brain pages it requests on your behalf, and — only with the write scope you chose — can write to them. We send nothing to a connected client that it did not ask for, and you can revoke the connection at any time.
  • Legal requirements — when required by law, legal process, or to protect rights and safety.

7. Data Retention

We retain your data for as long as your account is active. Chat history and automation configurations are preserved for your reference. You can delete individual chat sessions at any time. Usage and billing records — including usage logs, prepaid-balance transactions, payment records, and any donation records — are retained for the duration of your account and for up to 7 years after account closure as required by Belgian tax and accounting regulations. These billing records are kept separately from your chat history and are not removed when you delete individual chat sessions. If you close your account, we will delete your other personal data within 30 days, except where retention is required by law.

8. GDPR Compliance (EEA/UK Users)

Finautor is operated from Brussels, Belgium. We process personal data under the General Data Protection Regulation (GDPR). Our legal bases for processing are: contractual necessity (to provide the Service you signed up for, and to meter usage and charge for prepaid usage packs you buy), legitimate interest (to improve the Service, ensure accurate billing, and prevent abuse), legal obligation (to retain billing and accounting records), and consent (for optional integrations like Google Workspace).

If you are located in the European Economic Area or the United Kingdom, you have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority. For Belgium, this is the Belgian Data Protection Authority (Autorité de protection des données).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict processing of your data
  • Export your data in a portable format
  • Revoke consent for Google Workspace data access at any time

To exercise these rights, contact us at hello@finautor.com.

10. Cookies and Analytics

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

Product analytics: We use PostHog, a product-analytics service, to understand how the Service is used and to improve it. This processing takes place exclusively in the European Economic Area (PostHog EU Cloud) on the basis of our legitimate interest in improving the Service. Analytics is configured privacy-first: it sets no analytics cookies (browser local storage only), does not record your screen or keystrokes, masks page text, and never includes the content of your chats, your financial data, or amounts in analytics events.

Analytics opt-out: We honor your browser's Do Not Track setting — enabling it excludes you from analytics. You can also object to analytics processing at any time by contacting hello@finautor.com.

11. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Pierre Neuman
Rue du Moulin à Papier 32
1160 Brussels, Belgium
Email: hello@finautor.com