Effective date: 2026-10-22
1. Who We Are
This Privacy Policy explains how FinChiefs ("we", "us") processes personal data when you use finchiefs.com and its related services. FinChiefs is the controller of that personal data. You can contact us about anything in this policy via the Contact Support form on the platform.
2. Information We Collect
Account information: Email address, nickname, and optional profile details (bio, avatar) that you provide when creating an account.
Content you post: Messages you post in discussion threads, together with your nickname, are visible to other users of the platform.
Usage data: Pages visited, features used, AI queries made, and timestamps of activity. We also collect aggregated page-view statistics without the use of cookies.
AI interaction data: Questions you ask the AI and the responses generated, stored in your private threads.
Technical data: When you accept our Terms of Service or Privacy Policy, we record your IP address and browser information together with the document version you accepted, as a record of that acceptance. Our hosting providers also keep standard technical logs (such as IP addresses and request times) to operate and secure the service.
Billing data: If you subscribe or purchase credits, we store a Stripe customer identifier, a mirror of your subscription status (active / cancelled / past-due / renewal date), and a ledger of AI credit transactions (top-ups, debits, balance after each operation). We do not store your credit card number, CVV, or bank details — all payment-instrument data is handled by our payment processor. AI usage records (token counts, model cost, charge) are stored for billing purposes.
Email subscription: If you subscribe to the Daily Digest by email without an account, your email address and the page you subscribed from.
3. How We Use Your Information, and Why We May
We use your information for the following purposes, on the following legal bases:
- Performance of our contract with you: providing and maintaining the platform, your account, and your private AI threads; processing AI queries and tracking usage against your credit balance; processing payments, subscriptions, and credit packs; and sending transactional emails (billing receipts, cancellation confirmations, low-balance warnings, renewal reminders) and security emails (password resets, 2FA setup).
- Your consent: sending daily briefing emails and the Daily Digest email. You can withdraw your consent at any time.
- Our legitimate interests in operating, securing, and developing the service: keeping the platform secure, preventing abuse, and enforcing our Terms of Service; improving the platform, fixing issues, and measuring aggregated usage; and notifying our administrators about new paid users and top-ups.
- Compliance with legal obligations, and our legitimate interests in demonstrating compliance and in establishing, exercising, or defending legal claims: keeping billing and tax records, and records of your acceptance of our documents.
We do not make decisions that produce legal or similarly significant effects for you based solely on automated processing.
4. Data Storage and Security
Your data is stored with our hosting and database providers. We use appropriate technical and organisational measures to protect it, such as encryption in transit (HTTPS), access controls that limit each user to their own private data, verification of payment-processor events, and optional two-factor authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Who We Share Data With
We do not sell your personal data. We share personal data only with the following categories of recipients, to the extent needed for the purposes above:
- AI model providers, which process the questions you send to the AI and return responses.
- Our payment processor (Stripe), which handles the payment flow when you subscribe or purchase credits and receives the details you enter there (such as name, email, billing address, and payment-instrument data). We receive back a customer identifier, transaction status, and tax computation.
- Email delivery providers, which send account, billing, security, briefing and digest emails.
- Hosting, database, infrastructure, and analytics providers, which host and operate our application, database, processing pipelines, and aggregated usage statistics.
- Authorities, courts, or advisers, where required by law or needed to establish, exercise, or defend legal claims.
6. International Transfers
Some of these recipients are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, such as the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
7. Data Retention
- Account data is retained while your account is active.
- Email-subscription records are kept while you are subscribed; unconfirmed sign-ups are deleted within a reasonable time.
- AI usage records and credit-transaction ledger rows are retained for billing reconciliation and tax purposes, for as long as required by law (generally seven years).
- Subscription records are retained for historical subscription-state queries.
- Records of your acceptance of our documents are retained for as long as necessary to demonstrate that acceptance and to establish, exercise, or defend legal claims.
- Our payment processor retains payment and invoice data under its own retention policy.
- You can request account deletion via Contact Support. Account deletion removes your profile, private AI threads, and credit balance; billing records and records of acceptance are retained as described above.
8. Your Rights
Subject to the conditions and exceptions in applicable law, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your personal data.
- Restrict or object to certain processing, including processing based on our legitimate interests.
- Receive your data in a portable format.
- Withdraw your consent to optional processing (such as daily briefing or Daily Digest emails) at any time, without affecting processing that took place before. Every Daily Digest email has an unsubscribe link.
- Cancel your subscription at any time via the in-app Billing Portal.
To exercise these rights, contact us via the Contact Support form. We may need to verify your identity before acting on a request. You also have the right to lodge a complaint with a data protection supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.
9. Cookies and Local Storage
We use browser localStorage to persist your theme preference and authentication session. We do not use third-party tracking cookies, and our aggregated page-view statistics are collected without cookies. Our payment processor's checkout and billing pages may set their own cookies, governed by its own privacy policy.
10. Children
FinChiefs is not intended for users under 18 years of age.
11. Changes to This Policy
We may update this Privacy Policy at any time. Material changes will require explicit re-acceptance.
12. Contact
For privacy-related questions, data-export requests, or account-deletion requests, contact us via the Contact Support form on the platform.