Payment data
Full card numbers are processed by Waffo Pancake or the payment provider shown at checkout.
Privacy
How FinData4AI collects, uses, shares, protects, and retains account, billing, API usage, support, and security data.
Payment data
Full card numbers are processed by Waffo Pancake or the payment provider shown at checkout.
API data
We process request metadata, usage logs, and diagnostics to operate, secure, and bill the service.
No sale
We do not sell personal information as defined by applicable privacy laws.
Rights window
Privacy requests are normally handled within 30 calendar days after verification.
The data controller for the service is FinData4AI or the FinData4AI contracting entity identified in your checkout flow, invoice, order form, or enterprise agreement.
We collect information you provide directly, information generated by your use of the service, and limited information from payment, identity, analytics, security, and infrastructure providers.
Do not send sensitive personal data, regulated secrets, or third-party confidential information through prompts, API parameters, support tickets, or uploaded files unless your agreement permits it and appropriate safeguards are in place.
| Purpose | Legal basis |
|---|---|
| Provide and maintain the service, APIs, dashboard, documentation, and support | Contract performance |
| Process billing, subscriptions, credits, invoices, taxes, and renewals | Contract performance / legal obligation |
| Authenticate users, manage API keys, and secure accounts | Contract performance / legitimate interests |
| Measure usage, enforce rate limits, monitor reliability, and troubleshoot errors | Legitimate interests |
| Detect fraud, abuse, security incidents, and prohibited use | Legitimate interests / legal obligation |
| Improve product quality, documentation, coverage, and customer experience | Legitimate interests |
| Send service notices about billing, security, policy updates, and operational changes | Legitimate interests / contract performance |
| Send marketing communications where permitted | Consent or legitimate interests, depending on jurisdiction |
| Comply with laws, enforce terms, and respond to lawful requests | Legal obligation / legitimate interests |
We may aggregate or de-identify information so it no longer identifies a specific person. We may use such data for analytics, reliability, product improvement, benchmarking, and business reporting.
No system is perfectly secure. If a security incident is likely to materially affect your rights or obligations, we will notify affected users and regulators as required by law, and where legally required we aim to do so within 72 hours after confirmation.
| Data type | Typical retention | Handling after retention |
|---|---|---|
| Account profile and organization data | Account lifetime plus 90 days after closure | Delete or anonymize unless needed for legal or security reasons |
| Billing, invoices, and tax records | 7 years or the period required by applicable law | Archive securely, then delete or anonymize |
| API usage, credits, and rate-limit logs | 24 months unless a plan or order form states otherwise | Delete, aggregate, or anonymize |
| Security and audit logs | 12 months unless needed for investigation or compliance | Secure deletion or restricted archive |
| Support tickets and communications | 3 years after resolution | Delete or anonymize |
| Marketing preferences | Until you unsubscribe or the data is no longer needed | Suppress, delete, or anonymize |
Depending on your location, you may have the rights below. To exercise rights, contact privacy@findata4ai.com. We may need to verify your identity and authority before fulfilling a request.
| Right | Description |
|---|---|
| Know / be informed | Understand what personal information we collect and how we use it |
| Access | Receive a copy of personal information we hold about you |
| Correction | Correct inaccurate or incomplete information |
| Deletion | Request deletion where legally available |
| Restriction | Ask us to restrict certain processing |
| Portability | Receive certain data in a machine-readable format |
| Objection | Object to processing based on legitimate interests or direct marketing |
| Withdraw consent | Withdraw consent for processing based on consent |
| Opt out of sale or sharing | We do not sell personal information, but you may contact us with opt-out requests where applicable |
We normally respond within 30 calendar days after verification unless law allows or requires a different timeline. You may also complain to your local data protection authority.
Where permitted, we may send product updates, educational content, event invitations, offers, or market coverage announcements. You can opt out by using the unsubscribe link in an email, adjusting account settings where available, or contacting us.
Opting out of marketing does not stop service-required messages such as billing, security, policy, support, or operational notices.
FinData4AI, its infrastructure, and its service providers may process information in the United States, Singapore, the European Economic Area, Hong Kong, mainland China, and other locations where we or our providers operate.
When personal information is transferred internationally, we use safeguards such as data processing agreements, standard contractual clauses where applicable, access controls, security measures, and transfer assessments required by law.
FinData4AI is intended for users who are at least 18 years old and for business or professional use. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact us so we can take appropriate action.
The service may link to or integrate with third-party websites, data providers, payment providers, identity providers, analytics tools, support tools, and developer platforms. Their privacy practices are governed by their own policies, not this policy.
We may update this policy from time to time. If changes are material, we will provide notice through the service, by email, or another reasonable method at least 15 days before they take effect when practicable.
For privacy questions, requests, or complaints, contact us using the channels below. Please include your account email and describe the request clearly so we can verify and process it.
Privacy contacts
We route privacy and security requests to the appropriate internal owner.