Privacy Policy

What we collect, why, and the choices you have

Last updated November 5, 2026

This policy explains what information Fincanto collects, why we collect it, who we share it with, and the choices you have. Fincanto is run by Addava (“we”, “us”). If anything here is unclear, email us at hello@fincanto.com.

The short version

  • We collect what you give us, such as your email address and the receipts and bills you add, plus what we need to run the service.
  • We use it to run Fincanto: to store and read your documents, sort them into reports, and let you export them.
  • We don't sell your information, we don't show ads, and we don't use your documents to train AI models.
  • You can delete any document, or your whole account, at any time.

What we collect

  • Account details. Your email address. If you sign in with Google, we also receive your name and profile picture from Google.
  • Your documents. The receipts, bills and other files you upload or email to Fincanto, the details read from them (such as vendor, date, amounts, tax, currency, invoice number and the text on the document), and anything you add, such as names, notes, tags and reports.
  • Email sent to your Fincanto address. Each account can have its own address for receiving receipts. When mail arrives there, we receive the whole message, including the sender, subject, body and attachments. We keep the attachments as documents. If a message has no attachment, we save its text as a PDF.
  • Teams. If you create or join a team, the team's name, its members and their roles, and the email addresses of people you invite.
  • People you send documents to. When you email documents to someone, such as your accountant, we use their email address to send the message.
  • Messages to us. If you use the contact form or email us, your name, your email address and what you write.
  • Technical information. Like most websites, our servers and providers record technical details when you use Fincanto, such as your IP address, browser type, the pages you request and any errors. We use this to keep the service working and secure.
  • Cookies. A few cookies keep you signed in and remember your settings. Our Cookie Policy lists them.

Fincanto is free, so we don't collect payment details.

How we use it

  • To provide Fincanto: storing your documents, reading them, suggesting reports and tags, and building exports.
  • To sign you in and keep your account secure.
  • To send the email the service needs, such as sign-in codes, team invitations, documents you choose to send, and notices about your account or these policies.
  • To answer your messages.
  • To prevent abuse, fix problems and keep Fincanto secure.
  • To meet our legal obligations.

We don't sell or rent your personal information, we don't share it for advertising, and we don't use your documents to train AI models.

How Fincanto reads your documents

When you add a document, we send the file to our AI provider, which reads it and returns details such as the vendor, date and amount. We send it only so the provider can return those details to us. Today that provider is Nous Research's inference service, which runs models from Google, and uses Mistral's text recognition for PDFs.

AI can misread a document, so check the details before you rely on them.

Who we share it with

We share information only with the companies that help us run Fincanto, and only what each one needs to do its job:

  • Supabase stores our database and your files, and runs sign-in.
  • Cloudflare hosts Fincanto and delivers it to your browser.
  • Resend sends Fincanto's email and receives the email sent to Fincanto addresses.
  • Nous Research, and the Google and Mistral models it runs, read your documents as described above.
  • Google, if you choose to sign in with Google.

We also share information:

  • With people you choose. Members of a team can see the team's documents. When you email documents to someone, they get links to those files that work for 24 hours.
  • When the law requires it, or when we need to protect the rights, safety or property of our users, Addava or others.
  • If the business changes hands. If Addava is involved in a merger, acquisition or sale, your information may transfer as part of it. We'll tell you before your information becomes subject to a different privacy policy.

Google sign-in

If you sign in with Google, Fincanto asks Google only for your name, email address and profile picture. We use them to create your account, sign you in and show who you are in the app. We don't use Google user data for advertising, we don't sell it, and we share it only with the providers listed above that run Fincanto.

Fincanto's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

  • We keep your documents until you delete them. Deleting a document deletes its file too.
  • Deleting your account deletes your account, your documents and their files, and any team you own along with its documents. Documents in a team someone else owns stay with that team.
  • Copies can stay in our providers' backups and logs for a limited time before they are removed.
  • We may keep some information longer when the law requires it, or to resolve disputes and prevent abuse.

Your choices and rights

You can see and change your documents in Fincanto at any time, download the originals, export a CSV, and delete documents or your whole account from your settings.

Depending on where you live, for example in the European Union, the United Kingdom or California, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit how we use it. To make a request, email hello@fincanto.com. We'll answer within 30 days, and may need to confirm your identity first. We won't treat you differently for using these rights. You can also complain to your local data protection authority.

Where the GDPR applies, we use your information to provide the service you signed up for, for our legitimate interest in keeping Fincanto secure and working, to meet legal obligations, and with your consent where we ask for it.

Security

Your files are kept in private storage. Every request is checked against your account's permissions, information travels over encrypted connections, and our storage provider encrypts it at rest. No service is perfectly secure, so if we learn of a breach that affects your information, we'll tell you as the law requires.

Where your information is stored

Fincanto and its providers are based in the United States, and your information is stored and processed there and wherever our providers operate. If you use Fincanto from outside the United States, your information is transferred to the United States.

Children

Fincanto is for adults. We don't knowingly collect information from children under 13. If you believe a child has given us information, email us and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

Contact us

Questions or requests about your privacy go to Addava at hello@fincanto.com. See also our Terms of Service.