Privacy Policy

1. Introduction

Finautor ("we", "our", or "us") operates the website finautor.com and the Finautor application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Data controller: Pierre Neuman, Rue du Moulin à Papier 32, 1160 Brussels, Belgium. Contact: pierre.neuman@gmail.com

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and profile picture through our authentication provider (Clerk).

Usage data: We collect information about how you interact with our Service, including chat queries, automation configurations, dashboard settings, and feature usage patterns.

Google Workspace data: If you connect your Google account through our Connectors feature, we may access data from the following Google services based on the permissions you grant:

• Gmail (read-only access and compose) — to read and draft emails on your behalf for automation workflows.
• Google Drive — to access and manage documents relevant to your financial workflows.
• Google Calendar — to read and create calendar events related to financial deadlines and automations.
• Google Sheets — to read and write spreadsheet data for financial analysis and reporting.

Financial data: We process financial queries and analysis results. We do not store your brokerage credentials or execute trades on your behalf.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your financial queries and deliver AI-generated analysis
• Execute automated workflows you create
• Manage your account and provide customer support
• Send service-related notifications (e.g., automation run results)
• Monitor usage to enforce rate limits and prevent abuse

4. Google API Services — Limited Use Disclosure

Finautor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide and improve the features you explicitly request.
• We do not transfer Google data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with adequate user notice.
• We do not use Google data for serving advertisements.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with law, or the data is aggregated and anonymized for internal operations.

5. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including TLS encryption in transit, encrypted databases at rest, and strict access controls.

Google OAuth tokens are stored encrypted and are used solely to access the Google services you have authorized. You can revoke access at any time through the Connectors page in your Finautor settings or through your Google Account permissions.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers — third-party services that help us operate (e.g., Clerk for authentication, Anthropic for AI processing, Railway for hosting, Neon for database, Upstash for caching, Resend for email delivery).
• Legal requirements — when required by law, legal process, or to protect rights and safety.

7. Data Retention

We retain your data for as long as your account is active. Chat history and automation configurations are preserved for your reference. You can delete individual chat sessions at any time. If you close your account, we will delete your personal data within 30 days, except where retention is required by law.

8. GDPR Compliance (EEA/UK Users)

Finautor is operated from Brussels, Belgium. We process personal data under the General Data Protection Regulation (GDPR). Our legal bases for processing are: contractual necessity (to provide the Service you signed up for), legitimate interest (to improve the Service and prevent abuse), and consent (for optional integrations like Google Workspace).

If you are located in the European Economic Area or the United Kingdom, you have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority. For Belgium, this is the Belgian Data Protection Authority (Autorité de protection des données).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format
• Revoke consent for Google Workspace data access at any time

To exercise these rights, contact us at pierre.neuman@gmail.com.

10. Cookies and Analytics

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. We may use anonymized analytics to understand usage patterns and improve the Service.

11. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Pierre Neuman
Rue du Moulin à Papier 32
1160 Brussels, Belgium
Email: pierre.neuman@gmail.com