Privacy Policy

1. Scope of This Policy

This Privacy Policy describes how Finch Tech LLC and its Affiliates (“Finch Tech LLC,” “we,” “us” or “our”) collect, use, disclose and otherwise process information in connection with the FinchBooks website at finchbooks.com, our applications, and our related products, services and communications, including affiliated and co-branded sites that link to this policy (the “Services”). Capitalized terms not defined here have the meanings given in our Terms of Service.

Our customers use the Services to keep records about their own businesses, including information about their customers, vendors and employees (“Customer Data”). We process Customer Data to provide the Services and as described in this policy and our Terms. Each customer is responsible for providing any notices and obtaining any consents required for the Customer Data it submits. If your information was submitted by one of our customers, please contact that business with questions about its practices.

By using the Services, you acknowledge the practices described in this policy. This policy does not apply to Third-Party Services, which are governed by their own privacy policies.

2. Information We Collect

Information you provide. We collect information you give us directly, including:

• account and profile details, such as name, email address, phone number, password and preferences;
• business details, such as legal name, address, tax identification numbers, industry, ownership and banking information;
• identity and verification information, such as date of birth, government identifiers and documents requested for underwriting, fraud prevention or legal compliance;
• billing and payment information for your subscription;
• Customer Data, including invoices, estimates, bills, transactions, categories, receipts, documents and records about your customers and vendors;
• communications with us, survey responses, reviews, feedback and support requests; and
• prompts, questions and other content you submit to AI Features, and the output produced.

Information collected automatically. When you use the Services, we and our providers automatically collect device, browser and connection information (such as IP address, device identifiers, operating system and browser type), approximate location derived from your IP address, log data, pages and features viewed, links clicked, referring addresses, dates and times of access, and other usage and performance information, including through cookies, pixels, local storage and similar technologies.

Information from third parties. We receive information from others, including:

• banks, card issuers and data aggregators, for accounts you connect;
• payment processors and financial partners, about payments, payouts, refunds and disputes;
• identity verification, fraud prevention and credit reporting services, including business and consumer credit information where permitted by law;
• accountants, bookkeepers, resellers and other partners through whom you access the Services or whom you invite to your account;
• our Affiliates, marketing and analytics partners, and data providers; and
• publicly available sources, such as business registries and websites.

3. How We Use Information

We may use the information we collect to:

• provide, operate, maintain and support the Services and fulfill your requests;
• process transactions, payments, payouts and subscriptions, and send related notices;
• verify identity, underwrite and monitor accounts, and detect, prevent and investigate fraud, abuse, security incidents and other harmful or illegal activity;
• personalize the Services, including suggestions, categorizations and content tailored to you;
• analyze how the Services are used, conduct research, and develop, test and improve our products, features and technologies, including training, evaluating and improving our AI Features and models;
• communicate with you about the Services, including updates, security alerts and administrative messages;
• market and advertise our and our Affiliates' products and services, including measuring the effectiveness of campaigns and showing you relevant offers on and off the Services;
• comply with legal, tax, accounting, regulatory and payment network obligations, and respond to lawful requests;
• establish, exercise or defend legal claims and enforce our Terms and other agreements; and
• carry out any other purpose described to you at collection or with your consent.

4. Aggregated and De-Identified Information

We may aggregate, de-identify or anonymize information, including Customer Data, so that it no longer reasonably identifies you or any individual. We may use and disclose such information for any lawful purpose, including benchmarking, industry insights, analytics, research, product development and training machine learning models, without restriction. Where we maintain de-identified information, we will not attempt to re-identify it except as permitted by law.

5. How We Share Information

We may disclose information as follows:

(a)Affiliates. With our Affiliates, who may use it consistently with this policy, including to provide, improve and market their products and services.

(b)Service providers. With vendors who perform services for us, such as hosting, data storage, email delivery, customer support, analytics, security, identity verification and AI model providers.

(c)Financial and payment partners. With payment processors, banks, card networks, data aggregators and other financial partners as needed to provide Payment Services and bank connections, manage risk and comply with their rules.

(d)People you authorize. With Authorized Users, accountants, bookkeepers and partners you invite or through whom you access the Services, and with your customers and vendors when you send them invoices, statements, payment requests or other communications through the Services.

(e)Marketing and analytics partners. With advertising, marketing and analytics partners, who may collect information through cookies and similar technologies to measure use of the Services and deliver relevant advertising.

(f)Business transfers. In connection with, or during negotiations of, any merger, financing, acquisition, reorganization, bankruptcy or sale of all or part of our business or assets, information may be disclosed and transferred to the counterparty and its advisers.

(g)Legal and safety. When we believe disclosure is necessary or appropriate to comply with law, legal process or government requests; to enforce our agreements; or to protect the rights, property or safety of Finch Tech LLC, our users or others, including for fraud prevention and credit risk reduction.

(h)With consent. With other parties when you direct or permit us to do so.

6. Cookies and Similar Technologies

We and our partners use cookies, pixels, software development kits, local storage and similar technologies to keep you signed in, remember your preferences, secure the Services, run experiments, understand usage and measure and improve marketing. Some of these technologies are placed by third parties, who may collect information about your activity over time and across different websites and services.

Most browsers let you block or delete cookies; if you do, parts of the Services may not work. Because there is no common industry standard for “Do Not Track” signals, the Services do not respond to them, except where applicable law requires us to honor a recognized opt-out preference signal.

7. AI Features

When you use AI Features, the content you submit and relevant Customer Data are processed by us and by third-party AI model providers to generate output. We select providers that process this information on our behalf to provide the feature. We may retain prompts, output and related feedback to operate, secure and improve the Services, including our AI Features, as described in this policy.

8. Your Choices

• Account information. You may review and update account information in your settings.
• Marketing. You may opt out of marketing emails by using the unsubscribe link in them. We will continue to send service, billing, security and legal messages.
• Connections. You may disconnect bank and other Third-Party Services and remove Authorized Users at any time.
• Closing your account. You may ask us to close your account. Some information will be retained as described in the Retention section.

9. Privacy Rights Under Applicable Law

Depending on where you live, and to the extent those laws apply to us, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, and to opt out of certain processing, such as targeted advertising or the sale of personal information as those terms are defined by law. To make a request, email support@finchbooks.com. We will verify your request using information associated with your account, and we may decline requests that we cannot verify, that are excessive, or where an exception applies. You may use an authorized agent where the law allows, and you may appeal a decision on your request by replying to our response. We will not discriminate against you for exercising rights provided by law.

Requests concerning Customer Data that one of our customers submitted should be directed to that customer; we will assist our customers with such requests as required by law.

10. Retention

We retain information for as long as your account is active and afterward for as long as we consider reasonably necessary for the purposes described in this policy, including to comply with legal, tax, accounting and payment network requirements, resolve disputes, prevent fraud, enforce our agreements, and maintain backups and business records. Retention periods vary with the type of information and how we use it. We may retain aggregated or de-identified information indefinitely.

11. Security

We use administrative, technical and physical safeguards designed to protect information, including encryption of sensitive credentials. No method of transmission or storage is completely secure, however, and we cannot guarantee the security of information. You are responsible for keeping your credentials confidential and for using two-step verification. To the extent permitted by law, we are not responsible for circumvention of our security measures by third parties.

12. Where We Process Information

Finch Tech LLC is based in the United States, and we and our providers process and store information in the United States and other countries whose data protection laws may differ from those where you live. By using the Services, you understand that your information will be transferred to and processed in those locations.

13. Children

The Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy takes effect when we post it with a new effective date. If we make material changes, we will notify you through the Services or by email. Your continued use of the Services after an update takes effect constitutes your acknowledgment of the updated policy.

15. Contact

Questions and requests about this Privacy Policy may be sent to support@finchbooks.com or to Finch Tech LLC at the address below.