PRIVACY POLICY

1.1 Personal Information

We may collect personal information that you provide directly to us, including but not limited to:

• Name, email address, phone number, and mailing address
• Business information, including company name and tax identification numbers
• Financial information, including bank account details and transaction data
• Login credentials and account preferences
• Communications with us, including support requests and feedback

1.2 Financial Data

With your consent, we may collect financial data from your connected accounts, including:

• Bank account information and transaction history
• Credit card and payment method details
• Investment account information
• Tax documents and financial statements

1.3 Usage Information

We automatically collect certain information when you use our Services, including:

• Device information (IP address, browser type, operating system)
• Usage patterns and preferences
• Log files and analytics data
• Cookies and similar tracking technologies

We use the information we collect for various purposes, including:

• Providing and maintaining our Services
• Processing transactions and managing your account
• Personalizing your experience and improving our Services
• Communicating with you about your account and our Services
• Complying with legal obligations and regulatory requirements
• Detecting and preventing fraud and security threats
• Conducting research and analytics to improve our Services
• Marketing and promotional purposes (with your consent)

3.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Payment processors, financial institutions, and professional advisors (accountants, consultants, lawyers, etc.)
• Cloud storage and hosting providers
• Analytics, marketing, and advertising partners (social media ad services, ad networks, third‑party data providers)
• Customer support and communication platforms
• Providers of artificial intelligence and machine learning tools

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Compliance with legal obligations
• Protection of our rights and property
• Prevention of fraud or illegal activities
• Response to court orders or government requests

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5.1 Access and Control

You have the right to:

• Access and review your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Opt-out of marketing communications
• Request a copy of your data in a portable format

5.2 Cookie Preferences

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our Services.

5.3 Communication Preferences

You can opt-out of promotional communications by following the unsubscribe instructions in our emails or by contacting us directly. Please note that you may still receive transactional communications related to your account.

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. We may also retain information to comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

All information you provide to us is stored on Google Cloud Platform servers. We take reasonable steps to ensure our service providers adhere to the security standards we apply to your information and the transfers of your information. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Our service providers' servers are predominantly located in the USA and Canada, although some of our service providers are also located outside of Canada. While we use appropriate safeguards to keep your information secure, the laws in other places may differ from those in Canada, and authorities in those jurisdictions may access your information in accordance with their local laws. Customers who request that their data be stored exclusively within Canada will have that request honoured.

For users in Quebec, data may be stored outside of Quebec unless they specifically request Canadian-only storage, in which case we will honour that preference.

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We have taken commercially reasonable steps to ensure your data is protected in accordance with the Personal Information and Electronic Documents Act ("PIPEDA"), including leveraging the cyber security services, firewalls, as well as other security measures embedded within our third party service providers. From time to time, your Personal Information may be accessed by FinScale-authorized services or staff in another country where FinScale or authorized third parties operate. We implement measures to protect your information and to ensure compliance with applicable laws.

All issues and questions concerning the application, construction, validity, interpretation and enforcement of this Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Quebec, and the federal laws of Canada applicable therein.

To inquire about or exercise your rights in accordance with applicable law, please contact us at privacy@finscale.ai.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

FinScale Inc.

200-6666 rue Saint-Urbain

Montréal, QC H2S 3H1, Canada

Email: privacy@finscale.ai