Privacy Policy

1. Who we are

The Service is operated by FinDocAnalyzer. Contact: findocanalyzer@gmail.com · Vadodara, Gujarat, India. If your region requires a local data-protection representative and we have no establishment there, we will appoint one on request.

2. What we collect

• Account data — your name, email address, and organization name.
• Uploaded documents — the financial-report PDFs you upload and the text/metrics extracted from them.
• Usage & audit data — an append-only log of actions (uploads, processing, exports, comparisons, deletions) and basic security logs.
• Technical data — IP address, device/browser, and cookies (with consent where required).

3. How and why we use it (lawful bases)

• Contract — to provide the features you request (extract text, generate summaries/comparisons, manage your account).
• Consent — for marketing/outreach emails and non-essential cookies (you can withdraw anytime).
• Legitimate interest — security, fraud prevention, and enforcing our educational-only filter.

4. Third-party services (sub-processors)

We share the minimum necessary data with:

• AI providers (OpenAI, Google Gemini, AWS Bedrock) — only the text extracted from your uploaded documents is sent to the AI API you have selected, to generate summaries and metrics. Used under enterprise/no-training, zero-retention settings where available, governed by Data Processing Agreements and Standard Contractual Clauses.
• Cloud hosting (Oracle Cloud) — stores your account and documents.
• Email delivery (OCI Email Delivery) — delivers transactional and outreach email.

5. International transfers

We operate from India and our providers may process data in other regions (for example, US-based AI providers). Where personal data is transferred outside your region, we rely on Standard Contractual Clauses (SCCs) and provider contractual safeguards. Request details at findocanalyzer@gmail.com.

6. Data retention

You choose. By default we keep your uploaded reports and extracted data until you delete them or close your account. In your workspace Data settings you can switch to automatic deletion 90 days after upload. Exports auto-expire after 7 days. The append-only security/audit log is retained longer but is anonymized (not linked to you) on erasure requests, to preserve system integrity. We keep records only as long as necessary or as law requires.

7. Your rights

Depending on where you live, applicable privacy laws (such as the GDPR for EEA/UK residents and similar laws elsewhere) may give you the right to access, rectify, erase, restrict, port, and object to processing, and to complain to a regulator. We honour these rights worldwide. To exercise any right, email us; we respond within one month. Note the audit log is anonymized rather than hard-deleted.

8. Cookies

We use essential cookies to keep you signed in and secure the Service. Where the law requires it (for example, in the EU/EEA, UK, and other jurisdictions with cookie-consent rules), a consent banner gates any non-essential cookies; we do not use advertising cookies.

9. Security

We use reasonable technical and organisational measures (encrypted transport, access controls) to protect your data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

11. Personal data breach

Where required by applicable law (for example, under the GDPR), we notify the relevant authority within 72 hours of becoming aware of a breach, and affected users without undue delay.

12. Changes & contact

We may update this policy; material changes are reflected by the "last updated" date. Questions or requests: findocanalyzer@gmail.com · Vadodara, Gujarat, India.