Privacy Policy

This policy explains how Finatys handles information associated with finatys.com, enquiries, and agreed finance, accounting, software and automation services. The legal entity responsible for a paid engagement is identified in the applicable proposal or engagement documents.

1. Information you provide

When you submit an enquiry, we collect your name, business name, email, country, service interest, description of your requirements, optional phone number, preferred contact method and privacy acknowledgement. The page used to submit the enquiry is recorded to help us understand its source. Please do not include passwords, tax identifiers or confidential documents in this form.

For an accepted engagement, you may provide financial records, invoices, receipts, payroll information, tax records, identity information, documents or business-operational data through an agreed secure channel. The specific information depends on the service and jurisdiction. You must have authority to provide information about other people.

2. Why we use information

We use information to assess and respond to enquiries; communicate about proposals and services; organise and review client records; deliver agreed work; maintain appropriate business and payment records; protect systems; and comply with applicable legal, tax, professional and contractual duties. We do not use client financial or document content for advertising.

Where applicable law requires a lawful basis, we rely on contractual steps requested by you, performance of a contract, legal obligations, legitimate interests in running and securing the business, or consent as appropriate. Consent may be withdrawn where it is the basis for processing.

3. Enquiry storage and staff access

The website enquiry service stores accepted submissions in a server-side database. Authorised staff can review and update follow-up status through a protected workspace. Submission success is shown only after database acceptance. Notification records are queued for delivery to the notification provider configured by Finatys; where a provider is not configured or delivery fails, the enquiry remains in the staff inbox for follow-up.

The public content editor is for marketing material. It must not contain private client documents, credentials or financial records. Only published marketing content is made available publicly.

4. Accounts and Supabase

Client sign-in uses Supabase only when a production project is configured. Before configuration, online client access is unavailable. Configured accounts may involve email, country, authentication identifiers, profile information and service-request records. Access must be restricted through backend permissions and row-level security. Finatys does not implement Google Sign-In in this website build.

No Supabase project, storage region, document bucket or production provider arrangement has been verified for this release. Finatys must confirm the production configuration and update disclosures as needed before accepting client accounts or documents. The public site provides no document-upload feature.

5. Google OAuth and Google API scopes

This website does not request any Google OAuth or Google API scopes. It does not use a Google account connection to access Gmail, Drive, Calendar, Contacts, Sheets or other private Google account content. Analytics tags do not create such access.

Any future Google-connected feature must disclose its exact scopes, purpose, storage, sharing, retention and deletion behaviour before access is requested. Use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. Finatys will not sell Google user data or use it for personalised advertising.

6. Cookies and optional measurement

We remember your cookie choice in browser storage. Staff sign-in uses an HttpOnly session cookie, with a maximum eight-hour session. These functions support preferences and protected access.

Google Analytics (G-19ZVR0DKJW) and Google Ads (AW-17981288767) remain blocked until you accept optional measurement. When accepted, they may receive technical data such as device and browser details, IP address, pages visited, referral information and selected interaction events. Finatys sends public page paths and limited event categories; it does not send enquiry text, contact fields or private portal activity to analytics. Advertising personalisation is disabled in the consent configuration.

You can decline measurement and continue using the site. Change your choice at Cookie preferences; browser settings can remove existing cookies and storage. Google processing is governed by its own privacy terms.

7. Providers and disclosure

Information may be shared with providers actually used to host and secure the site, store enquiries, deliver notifications, authenticate accounts or perform an accepted engagement, only as needed for those purposes and under appropriate instructions or safeguards. The final hosting, notification and client-document providers depend on the approved production setup and must be confirmed before launch.

The retained Canadian tax-return pathway contains Stripe-hosted payment links, shown only after Finatys approves the current offers. If used, Stripe collects and processes checkout and card information under its own notice. The public website does not directly collect card details.

We may disclose information to professional advisers, qualified service partners or authorities when directed by you, necessary for the accepted engagement, or permitted or required by law. A business transfer may involve disclosure subject to appropriate confidentiality and legal safeguards. Finatys does not sell personal information for money.

8. Financial records and confidentiality

Client records are handled for the agreed engagement, required recordkeeping, security, dispute management and legal duties. Access is limited to authorised people and verified providers who need it. The engagement should identify the secure document channel, responsibilities, access rules and delivery preferences. Ordinary public forms are not suitable for confidential financial documents.

9. Retention and deletion

Retention varies by record type, engagement, jurisdiction and applicable recordkeeping duties. We retain information only as long as reasonably necessary for its purpose and applicable legal, tax, professional, contractual or dispute requirements. No fixed record-specific retention periods have yet been approved for this release; the production retention schedule must be confirmed before launch.

You may request deletion through the confirmed privacy contact. Legal holds and required records may limit deletion; information no longer required should be deleted or de-identified, subject to limited backup retention. Browser preference data can be cleared through browser settings. Removing a browser preference does not delete an enquiry stored on the server.

10. International processing and security

Service delivery and configured providers may involve processing outside your province, state or country. Processing locations and any required transfer safeguards depend on the approved engagement and production providers. No specific hosting country is claimed without verification.

Finatys uses safeguards appropriate to the systems and information involved. No transmission or storage system can be guaranteed completely secure. Keep credentials confidential and obtain secure delivery instructions before sharing sensitive records.

11. Your rights

Depending on applicable law and legal exceptions, you may have rights to access, correct, delete, restrict, object to processing of, or obtain a copy of your personal information; withdraw consent; or complain to a privacy regulator. We may need to verify your identity before acting. Requests can be limited where law requires or permits retention.

12. Children

The website is intended for adults and businesses. It is not directed to children under 13. Information about dependants needed for an engagement must be supplied by an authorised adult and handled for that engagement and applicable legal duties.

13. Updates and contact

Revisions are posted here with an updated effective date. Additional notice or consent will be provided where required before materially changing information use.

The contact address in the supplied business materials is contact@finatys.com. Its monitored status and the responsible legal operator must be confirmed before publication. Use “Privacy Request” in the subject line and avoid sending sensitive documents until the contact channel is confirmed.