Privacy Policy
Last updated: July 2026
Who We Are
Fintoit is operated by Fintoit LLC, 5700 Tennyson Parkway, Suite 300, Plano, TX 75024. Contact us at fintoit.com/contact.
Information We Collect
We collect: account and identity data (name, email, hashed password, company name, phone number); your company financial data (starting cash, transactions, budgets, goals); accounting data (invoices, including customer names and emails, bills, and vendor contacts); payroll data (titles, salaries, equity, employment type, and signed employee contracts with electronic signatures); cap-table data (shareholders, investment amounts, vesting); uploaded documents, including tax documents and W-9 forms that contain taxpayer identification numbers (SSN, EIN, or TIN); bank-account and transaction data through Plaid if you choose to connect a bank; Stripe customer and subscription identifiers; security data (two-factor secrets, one-time codes, and password-reset tokens); AI chat history; referral codes; feedback and contact submissions; avatar images; and website analytics and visitor data.
How We Use Your Information
To provide and operate the Service, generate AI-powered insights and forecasts, verify your identity by email and SMS, process subscription billing, send transactional emails, run our referral program, respond to support requests, understand product usage through analytics, and detect fraud or abuse.
AI and Your Data
When you use our AI features (AI CFO chat, insights, and forecasting), we send the relevant financial and transaction data and your prompts to our AI provider, Groq, to generate responses. This can include the names of vendors, customers, or employees contained in your records. We send only what is needed to answer your request. Groq does not retain this data or use it to train its models.
Data Sharing
We do not sell your data. We share data only with service providers that help us operate Fintoit, each under a data processing agreement or equivalent data-protection terms, or when required by law. Our current providers are: Supabase (database hosting), Render (application hosting), Groq (AI processing), Stripe (payments and subscriptions), Resend (transactional email), Quo (SMS delivery), Plaid (bank-account linking, only if you connect a bank), Zoho (website analytics via PageSense, scheduling, and recruiting), and Google Analytics and Leadfeeder (website analytics).
Data Security
Passwords are stored as bcrypt hashes. Sensitive identifiers such as the taxpayer identification numbers collected on W-9 forms are access-restricted and shown only in partially redacted form. Your data is stored in a secured PostgreSQL database. No system is completely secure, so please use a strong, unique password. If a security breach affects your personal information, we will notify you and the relevant authorities as required by law.
Data Retention
We retain your data while your account is active and delete it within 30 days of account closure, except for records we are required to keep longer for legal, tax, or accounting reasons (such as tax documents and financial records). Backups are purged on a rolling basis.
Your Rights
You may access, correct, delete, or export your data at any time. Contact us at fintoit.com/contact to exercise these rights. Depending on where you live, you may have additional rights under applicable law.
Cookies
We use essential cookies to keep you signed in and secure your session. On our public website we also use analytics and visitor-identification tools, including Google Analytics, Leadfeeder, and Zoho PageSense, which set cookies and collect usage data.
Minimum Age
Fintoit is intended for business use by adults. You must be at least 18 years old to use the Service.
Changes
We will notify you of significant changes to this policy by email or through an in-app notice.