Privacy Policy

1. Overview

Finora is a household personal-finance application that helps US families track their accounts, transactions, HSAs, and credit cards. This policy explains what data we collect, why we collect it, how we store and share it, and what control you have over it.

We wrote this in plain English. If anything is unclear, email us at privacy@finora.app and we'll explain it.

2. Data we collect

Account information

• Your name, email address, and password (hashed)
• Household members you add (name, role: partner, teen, viewer)
• Display preferences (theme, currency formatting)

Financial data

• Bank account balances, transaction history, and account metadata received from Plaid for the accounts you connect
• Credit card details you add manually (issuer, last 4 digits, statement and due dates, credit limit, reward structure) — we never store full card numbers
• Manual entries you create: cash transactions, properties, rental income, loans, statements you upload

HSA, FSA, and tax-related data

• Medical and dental expense categorizations you confirm or decline
• Reimbursement records (date, amount, source account, IRS eligibility notes you add)
• HSA contributions and balances

Onboarding responses

• The account inventory you build during signup (account types, employer names, paycheck cadence, household composition)
• Your stated financial goals and pain points

Usage data

• Pages visited and features used inside the app, along with the timestamps of those visits
• Session duration and basic device information (browser, OS, screen size) for layout and bug-fixing purposes
• Server logs of API requests (URL, response status, IP address), retained for 30 days for security and debugging

3. How we collect it

• Directly from you: when you sign up, complete onboarding, or enter data manually
• From Plaid: when you connect a bank account through our Plaid integration. Plaid securely passes us balance and transaction data on your behalf. See Plaid's end-user privacy policy for how they handle the credentials you give them.
• Automatically: via essential cookies for session management and lightweight analytics on which features are used

4. How we store it

• All Finora data is stored in the United States on Supabase (PostgreSQL), which runs on AWS US regions
• Encrypted at rest using AES-256
• Encrypted in transit using TLS 1.2 or higher
• Row-Level Security (RLS) ensures that the database itself prevents any household from reading another household's data — even with a compromised query
• Passwords are hashed and never visible to us. Bank credentials are never stored by Finora — they live only with Plaid.

5. How we share it

We never sell your data. We never share individual financial data with advertisers, data brokers, insurers, or any third party for marketing.

We share data only with these processors, only as needed:

• Plaid: we send the bank credentials you provide directly to Plaid to establish the connection. Plaid returns balance and transaction data to us. Plaid's privacy policy governs their handling of those credentials.
• Stripe: for paid subscriptions, we share your email and the amount charged with Stripe so they can process payments. Stripe does not see your bank balances, transactions, or any other in-app financial data.
• Anthropic (Claude API): when a transaction needs AI categorization, we send the transaction's merchant and descriptor text, the amount, and transaction metadata (account type, payment method, merchant category code). Before anything is sent, person names and payment memos are automatically removed from the descriptor text. We do not send your name, email, household ID, or account numbers.
• Groq (AI inference): some transactions are categorized by an AI model running on Groq's infrastructure instead of Anthropic's. Groq receives the same minimized data — descriptor text with person names and memos removed, the amount, general location (city/state) used to identify local merchants, and category hints. Groq's privacy policy governs their handling of these requests.
• Resend: for transactional emails (daily digest, alerts, password resets) we send your email address and the message body
• Supabase / AWS: our database and hosting providers, bound by industry-standard data-processing agreements

In the future, Finora may publish aggregated, anonymized benchmarks (e.g., “families in your zip code spend X% of income on groceries”). Participation will be opt-in only, and individual households will never be identifiable in those benchmarks.

6. How long we keep it

Finora’s retention windows are tier-by-data-type, not flat. We hold tax-relevant records (HSA, FSA, DCFSA, rental property) long enough to survive an IRS audit, and keep cash-flow data for a personal-finance-useful window. Every window has two phases: active (live in the app, queryable in your dashboard) and archive (retained but accessed via a “request my older records” flow that emails you a download link).

Backups: our backup system runs on a 7-day rolling window. When you delete data, it physically sits in cold backup storage for up to 7 days before aging out. After that, truly gone. (Industry standard; same as Stripe, Google, every cloud-backed service.)

Automated enforcement: the windows above are applied by a nightly job, not by a human. Rows that pass their active window are automatically archived; rows that pass their archive window are automatically deleted. No manual archival, ever.

If you cancel your subscription, Plaid connections are revoked immediately. You then choose between (a) Downgrade to Free — your historical data stays viewable in your account, paid features go away; or (b) Cancel everything and delete my data — irreversible hard delete that overrides every retention window above. There is no third “pause and reconsider” option. See the cancellation flow in Settings.

7. Your rights

At any time you can:

• Export — download a complete copy of your household data on demand from Settings → Account. Works on every tier, including Free.
• Year-end summaries — download a 2-3 page PDF report for any year your subscription covered. Generated automatically each January 1; available on-demand for missing years.
• Correct — edit any field you entered manually; correct an AI-suggested category at any time. Corrections persist forever as part of your trained classifier rules.
• Downgrade — drop to the Free tier from Settings → Account. Plaid connections revoked, all your historical data stays viewable, paid features suspended.
• Delete — request complete and irreversible deletion. Overrides every retention window in section 6. The only thing that survives is a one-way hashed audit row (no PII, not recoverable) required for our compliance records.
• Revoke a single bank — disconnect one Plaid item from Settings without canceling your whole account.
• Opt out — decline participation in any future anonymized benchmarking program. (We don't run one today.)

Legal frameworks

GLBA (Gramm-Leach-Bliley Act). Because Finora handles consumer financial information through Plaid, we are subject to the federal Gramm-Leach-Bliley Act. The collection, sharing, and retention disclosures in sections 2-6 of this policy satisfy the GLBA Privacy Rule annual notice requirement.

State privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA). Residents of California, Virginia, Colorado, Connecticut, and Utah have additional rights under their state privacy laws: the right to know what data we hold, the right to delete, the right to correct, the right to opt out of any future “sale” or “sharing” of personal information, and the right to non-discrimination for exercising these rights. Finora does not sell personal information and does not share it for cross-context behavioural advertising. We honor browser-based opt-out preference signals, including Global Privacy Control (GPC). California residents may also designate an authorized agent to submit requests on their behalf; contact privacy@finora.app with the request and a copy of the agent’s authorization.

GDPR (EU General Data Protection Regulation). EU residents have the right to access, rectify, port, restrict, object to processing, and be forgotten. The right to be forgotten overrides every retention window in section 6 above.

How to exercise these rights: most of them are self-serve from Settings → Account (export, downgrade, delete). For anything else, email privacy@finora.app — we respond within 30 days, the GDPR standard.

8. Automated decision-making

Finora uses automated systems to assign categories to your transactions, flag potentially HSA-eligible expenses, recommend the best credit card for a purchase, and project cash flow. These are informational outputs — they do not result in legal or similarly significant effects without your review. You can:

• Override any AI-suggested category at any time; your correction is saved as a permanent rule that re-trains the classifier for your household.
• Approve or reject AI-flagged HSA reimbursements; the system never moves money on your behalf.
• Reject all AI suggestions for an account and operate in fully manual mode (Settings → Notifications → Categorization).
• Request a human review of any AI decision by emailing privacy@finora.app. EU residents have the right to this human-in-the-loop review under Article 22 of the GDPR.

When a transaction needs AI categorization, the merchant and descriptor text and the amount are sent to an AI provider (Anthropic’s Claude API or Groq — see Section 5). Person names and payment memos are automatically removed from that text before it leaves our servers. Anthropic does not train its models on Finora customer data.

9. Security incidents

We take reasonable administrative, technical, and physical safeguards to protect your data (see section 4). No system is perfectly secure, and we may at some point experience a security incident.

Our commitment: if we determine that unauthorized access to your personal information has occurred and that the incident poses a material risk to you, we will notify you by email within 72 hours of confirming the breach. The notification will describe (a) what data was involved, (b) when the incident occurred, (c) what we are doing to contain and remediate it, and (d) what steps you can take to protect yourself.

We will also notify the appropriate state and federal authorities as required by law, including the FTC Safeguards Rule and applicable state breach-notification statutes.

Report suspected vulnerabilities or security incidents to security@finora.app. Good-faith security research is welcome.

10. International data transfers

Finora is operated from the United States, and all customer data is stored on US-based AWS infrastructure (see section 4). We do not currently market to or accept users outside the United States.

If you access Finora from outside the US, your information will be transferred to, stored in, and processed in the United States. By using the Service from outside the US, you consent to that transfer. For EU and UK residents, this transfer is supported by the European Commission’s Standard Contractual Clauses (2021/914) where applicable.

11. Children

Finora is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. A parent or guardian may add a household member under 18 (with the “teen” role) to share visibility into family finances; that member's data is controlled by the household owner.

12. Changes to this policy

We may update this policy as Finora evolves. For material changes (new categories of data, new third-party processors, changes to retention) we will notify you by email at least 30 days before the change takes effect. The “Last updated” date at the top of this page always reflects the current version.

13. Contact

Privacy questions, data requests, and complaints: privacy@finora.app

General product questions: hello@finora.app

Finora is operated from Frisco, Texas, United States.