Privacy policy
This explains what Finvayo collects when you use finvayo.com and app.finvayo.com, why, and what you can ask us to do about it. We keep it to what the service actually does.
What we collect
- Account details: your name and email address. Your password is stored only as a salted hash, never in plain text.
- Sessions: when you sign in we record the time, your IP address and your browser's user agent, so you can see and end your signed-in devices.
- Workspaces: the workspaces you belong to, your role in each, and invitations (including the email address that was invited).
- Security log: a record of important actions such as sign-in, sign-up, creating or renaming a workspace, and inviting or removing members. It includes who did it, when, and the IP address.
- Emails we send you: verification, sign-in link, password reset and invitation messages.
Finvayo tracks and calculates money. It does not receive, hold or send your funds, and it does not collect card or bank details.
Cookies
We only use the cookies needed to keep you signed in, shared across finvayo.com subdomains. They are strictly necessary for the service. We do not use advertising or analytics cookies.
Who processes your data
- Cloudflare hosts the service, stores the data, sends our emails and runs the Turnstile check that tells people from bots on sign-in and sign-up forms.
- Have I Been Pwned is used to check that a new password has not appeared in a known breach. Only the first five characters of a one-way hash of the password are sent, never the password or your email.
We do not sell your data or share it for advertising.
How long we keep it
We keep your account and workspace data while your account exists. Sessions expire after 30 days. Invitations expire after 7 days. The security log is kept so we can investigate abuse. When you delete your account, we delete your profile, sign-in methods, sessions and memberships, and any workspace you were the only member of. Security log entries are kept without your name.
Your choices
You can download a copy of your data and delete your account yourself from your account page. For anything else, or any question about this policy, email support@finvayo.com. You can change your name and password, and sign out of any device, from your account page.
Changes
If we change this policy in a way that matters, we will update the date above and tell account holders by email.