Privacy Policy

1. Information we collect

Information you provide

• Account and profile information, such as your name, email address, organization, authentication information, preferences, and support communications.
• Customer Content, including prompts, Analyst conversations, notes, uploaded files, workbooks, models, source documents, images, presentations, generated artifacts, comments, citations, and feedback.
• Transaction information. If you purchase a paid Service, our payment provider processes payment-card and billing details. We receive limited transaction records, such as subscription status and payment results, rather than complete card numbers.

Information collected automatically

• Device and network information, such as IP address, browser, device type, operating system, language, referring page, and approximate location derived from IP address.
• Usage and diagnostic information, such as pages and features used, timestamps, session activity, model-job status, performance data, crash reports, security events, and interactions with files and generated outputs.
• Cookies and local storage. We use necessary cookies and similar technologies for authentication, session continuity, security, preferences, and core Service functionality. We do not currently use these technologies for advertising or optional analytics. Browser settings may allow you to control these technologies, but blocking necessary storage can prevent the Service from working.

Information from other sources

We may receive information from an organization administrator, an integration you authorize, identity and payment providers, and public or licensed sources such as regulatory filings and market or company information.

2. How we use information

We use information to:

• provide, operate, maintain, and personalize the Service;
• process Customer Content and create, edit, and return requested models, documents, and other outputs;
• authenticate users and maintain account and workspace security;
• process subscriptions, payments, and account administration;
• provide support and communicate about the Service;
• monitor reliability, troubleshoot errors, prevent fraud or abuse, and enforce our Terms of Service;
• evaluate and improve features, quality, safety, and performance using data permitted by our agreements and applicable law; and
• comply with legal obligations and protect rights, safety, and property.

3. AI and Customer Content

The Service uses artificial-intelligence models and other automated systems to analyze Customer Content and generate responses, models, calculations, and artifacts. To perform requested work, relevant Customer Content may be sent to AI model providers and other service providers acting for us. We configure and govern those providers under applicable business or API terms and use their services only as needed to provide, secure, maintain, or improve the Service.

We do not sell Customer Content or use it for cross-context behavioral advertising. We do not use Customer Content to train general-purpose AI models unless we first provide notice and obtain any consent required by applicable law or contract.

You control what you submit and are responsible for ensuring that you have the authority to provide it. Customer Content may contain confidential business or financial information. Do not submit payment-card data, account credentials, government identification numbers, health information, or other specially regulated personal information unless the Service expressly supports that use and appropriate written terms are in place.

4. How we disclose information

We may disclose information to:

• Service providers that support infrastructure, AI and document services, authentication, payments, communications, security, diagnostics, and customer support. They may process information only for the services they provide to us and subject to applicable contractual obligations.
• Your organization. If your account is managed by an employer or other organization, its authorized administrators may manage the account and access organization workspaces and Customer Content, consistent with that organization's policies.
• Legal and safety recipients when reasonably necessary to comply with law or legal process, enforce our agreements, investigate fraud or security issues, or protect rights, safety, and property.
• Transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.

We may disclose aggregated or de-identified information that cannot reasonably identify you. We do not sell personal information for money or share it for cross-context behavioral advertising.

5. Retention

We retain personal information and Customer Content for as long as reasonably necessary to provide the Service, maintain your account, complete requested transactions, satisfy legitimate operational and security needs, resolve disputes, and comply with law. Retention periods vary based on the information, workspace settings, contractual requirements, and legal obligations. Deletion from active systems may not immediately remove information from encrypted backups, security logs, or records we must retain by law.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, authentication, encryption in transit, and security monitoring where appropriate. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, altered, or disclosed without authorization. You are responsible for protecting account credentials and promptly notifying us of suspected unauthorized use.

7. International processing

CorpFinAI and its service providers may process information in the United States and other countries. Those countries may have data-protection laws different from those where you live. Where required, we use appropriate safeguards for cross-border transfers.

8. Your privacy rights

Depending on where you live, you may have rights to request access to, a copy of, correction of, or deletion of personal information; to object to or restrict certain processing; to withdraw consent; or to appeal our response. You may also have a right not to receive discriminatory treatment for exercising a privacy right.

Submit a request through the contact method made available in the Service. We may verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. Certain information may be exempt from a request, including information we must retain for security, legal, or contractual reasons. We do not currently sell personal information or share it for cross-context behavioral advertising.

9. Children

The Service is intended for adults and business users and is not directed to children under 18. We do not knowingly collect personal information from children under 18. Contact us if you believe a child has provided personal information to the Service.

10. Changes to this policy

We may update this Privacy Policy as the Service or applicable requirements change. We will update the date above and provide additional notice when required by law. Your use of the Service after an update is subject to the revised policy, but we will seek consent before using personal information for a materially different purpose when required.

11. Contact us

Questions, complaints, and privacy requests may be submitted through the contact method made available in the Service.