Legal
Privacy Policy
Last updated: April 12, 2026
This Privacy Policy explains how Finsharc ("we", "us", "our") processes personal data when you visit https://www.finsharc.com, use our marketing site, join waitlists or betas, use embedded demos, contact us, or subscribe to updates. It is designed to align with common expectations under the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and similar frameworks, in addition to sensible practices for finance-related products. Native mobile applications may show additional in-product privacy information and, where required, obtain separate consent.
1. Data controller
The data controller for personal data described in this Policy is the organization operating Finsharc under the domain referenced above. For privacy requests, contact us at info@finsharc.com.
2. Categories of personal data
Depending on how you interact with us, we may process:
- Identity and contact data: name, email address, and any other details you include when you email us, submit waitlist or beta requests (including via mailto links), or correspond through support channels.
- Technical and usage data: IP address, approximate location derived from IP, browser and device type, operating system, referring URLs, pages viewed, timestamps, and similar diagnostics. This may be collected by our hosting provider, content delivery networks, or analytics tools configured for the site.
- Communications metadata: records of inquiries, subject lines, and message routing needed to respond and demonstrate compliance.
We do not use this website to collect full payment card numbers, government identifiers, or the contents of your financial ledgers. Any such data processed inside Finsharc mobile products is governed by those products' notices and your device permissions, not by this web policy alone.
3. Purposes and legal bases (GDPR / UK GDPR)
Where GDPR or the UK GDPR applies, we rely on the following legal bases:
- Performance of a contract or pre-contract steps (Art. 6(1)(b)): handling waitlist and beta requests you initiate, and providing access to demos or materials you request.
- Legitimate interests (Art. 6(1)(f)): operating, securing, and improving the website; measuring aggregated traffic; fraud prevention; defending legal claims; and internal reporting, balanced against your rights.
- Consent (Art. 6(1)(a)): where we use non-essential cookies or send optional marketing, we will ask for consent where required and you may withdraw it at any time.
- Legal obligation (Art. 6(1)(c)): retaining or disclosing information where law or competent authority requires it.
4. Cookies and similar technologies
We may use cookies, local storage, or similar technologies that are strictly necessary for the site to function, and — only if enabled — analytics or preference cookies. Where required (for example in the EEA, UK, or certain U.S. states), we will obtain consent before non-essential cookies are set and provide a way to change preferences.
5. Recipients and international transfers
We use trusted service providers (for example hosting, infrastructure, email, and analytics) who process data on our instructions. They may be located outside your country, including in countries that do not provide the same level of data protection. Where GDPR applies and data is transferred outside the EEA or UK, we use appropriate safeguards such as the European Commission's standard contractual clauses, the UK International Data Transfer Addendum, or other mechanisms recognized under applicable law.
6. Retention
We retain personal data only as long as necessary for the purposes above, including resolving disputes and satisfying legal, accounting, or reporting requirements. Technical logs are typically retained for a limited rolling period unless needed for security investigations. Waitlist and support correspondence is retained according to operational need and applicable limitation periods.
7. Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the Internet is completely secure; you should use strong passwords, keep devices updated, and avoid sending highly sensitive information by email unless encrypted channels are provided.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data or completion of incomplete data;
- Request erasure ("right to be forgotten") where grounds apply;
- Request restriction of processing in certain circumstances;
- Receive personal data you provided in a structured, machine-readable format (data portability) where processing is based on consent or contract and automated;
- Object to processing based on legitimate interests, including profiling in some cases;
- Withdraw consent where processing is consent-based, without affecting prior lawful processing;
- Lodge a complaint with a supervisory authority in your country (for EEA residents, a list of authorities is available from the European Data Protection Board).
To exercise these rights, contact info@finsharc.com. We may need to verify your identity. If you are in California or other U.S. states with privacy laws, you may have additional rights (for example to know, delete, or opt out of certain "sales" or "sharing" of personal information as defined locally). We do not sell personal data for money; if we use advertising technology that constitutes a "sale" or "sharing" under local law, we will provide a compliant opt-out.
9. Children
Our Services are not directed to children under 16 (or the higher age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have done so, contact us and we will take steps to delete the information.
10. Financial products and regulated advice
Finsharc provides software and educational content. We are not a bank, broker-dealer, investment adviser, or insurance provider unless separately licensed and disclosed. Nothing on this website is tax, legal, investment, or accounting advice. For decisions with regulatory or financial consequences, consult qualified professionals in your jurisdiction.
11. Changes to this Policy
We may update this Policy to reflect legal, technical, or business changes. We will revise the "Last updated" date and, where required, provide additional notice (for example by email or a banner on the site).
This Policy is provided for transparency. Laws vary by country and sector; you should have qualified counsel review your final documents, entity name, DPO or EU representative appointments (if applicable), and any app-store or sector-specific obligations (e.g. payment rules, open banking, or licensing).