Privacy Policy

1. Introduction

Finquill, Inc. ("Finquill," "we," "us," or "our") operates FinquillOS, an AI-native integrated research environment for investors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or otherwise interact with our services. By using FinquillOS, you consent to the practices described in this policy.

2. Information We Collect

Information you provide directly:

• Account registration information (email address, name, password)
• Profile information and preferences
• Watchlist and portfolio data you enter or import
• Research notes, journal entries, and saved analyses
• Wallet addresses and brokerage connections you choose to link
• API keys you provide for third-party integrations
• Communications you send to us (support requests, feedback)
• Payment and billing information processed by our payment provider

Information collected automatically:

• Usage data (pages visited, features used, actions taken)
• Device information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• AI interaction logs (queries, prompts, and generated responses)
• Log data (access times, referring URLs, error logs)
• Performance and diagnostic data

3. How We Use Your Information

• Provide, operate, and maintain the FinquillOS platform
• Personalize your AI-powered research experience and content recommendations
• Generate insights, briefings, and research reports based on your preferences
• Process transactions and manage your subscription
• Improve and train our AI models and services
• Send important service communications and transactional emails
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud, abuse, and security issues
• Analyze usage patterns to improve platform performance and features
• Comply with legal obligations and enforce our terms

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our platform:

• Essential cookies: Required for authentication, security, and core functionality
• Functional cookies: Remember your preferences, settings, and customizations
• Analytics cookies: Help us understand how users interact with the platform

You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• Service providers: Third-party vendors who assist in operating our platform (hosting, analytics, payment processing, AI inference)
• AI providers: Queries may be processed by third-party AI model providers to generate responses; we minimize personally identifiable information in these requests
• Legal requirements: When required by law, subpoena, court order, or governmental regulation
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing with a third party

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest (AES-256), secure authentication via Supabase, row-level security policies, and regular security audits. API keys and broker credentials you connect are scoped to your account by row-level security and encrypted at rest at the storage layer; the application does not add a separate encryption layer of its own. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance). Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.

8. Third-Party Services

FinquillOS integrates with third-party services including AI model providers (e.g., OpenAI, Anthropic), market data APIs, payment processors (e.g., Stripe), and analytics tools. These services process data under their own privacy policies. We encourage you to review their policies before using these integrations. We are not responsible for the privacy practices of third-party services.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we take steps to ensure appropriate safeguards are in place, including standard contractual clauses and compliance with applicable data transfer frameworks.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request export of your data in a machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise these rights, contact us at hello@finquill.ai. We will respond within 30 days.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA. To exercise your CCPA rights, contact us at hello@finquill.ai.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include: performance of a contract (providing the Service), legitimate interests (improving our platform, fraud prevention), consent (where you have opted in), and legal obligations. You may lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.

13. Children's Privacy

FinquillOS is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at hello@finquill.ai.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of FinquillOS after changes are posted constitutes acceptance of the revised policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: