Privacy Policy

This Privacy Policy explains how Foresight ASG Inc, doing business as Finvisor ("Finvisor", "we", "us", or "our"), handles information in connection with the Finvisor application available at app.finvisor.ai and its related services (together, the "Platform").

The Platform is a financial-operations application used by our client businesses ("Clients") and the individuals a Client authorizes to access its workspace ("Authorized Users"). It is where accounting, bookkeeping, bank-feed, compliance, payroll, and CFO-support work is performed. This policy is written for the people who log in and use the Platform — it is not a policy for anonymous visitors to a marketing website.

Two categories of data. We distinguish between (1) personal information about Authorized Users (for example, the account details you use to sign in), which we control; and (2) Client Data — the financial and business records that a Client uploads or connects to the Platform (transactions, ledgers, invoices, documents, and similar). We process Client Data on the Client's behalf and under the Client's instructions as a service provider / processor. Where a Client's own privacy notice or agreement governs that Client Data, it controls for that data.

Contact: fran@finvisor.com

Summary of Key Points

• Who it covers: Authorized Users of Client workspaces on the Platform, and the Client Data those workspaces hold.
• Account information we collect: Name, email, phone, job title, workspace role, and authentication identifiers (including single sign-on / SAML and OAuth sign-in).
• Client Data we process: Financial and business records the Client uploads or connects — bank and card transactions, accounting ledgers, invoices and bills, vendor and contact records, payroll and tax/compliance information, and uploaded documents.
• Connected accounts: With the Client's authorization, we access data from third-party systems the Client links (banking data providers, accounting platforms, payroll, and document sources).
• Sale of personal information: We do not sell personal information and do not use it for cross-context behavioral advertising.
• Multi-tenant isolation: Each Client's data is logically isolated so that one Client's data is never exposed to another Client.
• Rights: Vary by location (EU/UK, Canada, US states). Requests about Client Data are routed through the responsible Client.

1. Information We Collect

Account and profile information

• Name, email address, phone number, and job title
• Workspace role and permissions within a Client workspace
• Authentication identifiers — including single sign-on (SAML), OAuth-based sign-in, and multi-factor authentication factors
• Communications you send us (support requests, feedback, and in-product notes)

Client Data connected to or uploaded to the Platform

When you use the Platform to run a Client's finance operations, we process the business records that make those features work. Depending on the modules a Client has enabled (for example, accounting, compliance, or payroll) this may include:

• Bank and credit-card transactions and account balances
• General-ledger entries, chart of accounts, journals, and reconciliations
• Invoices, bills, payments, and vendor/customer records
• Vendor tax and onboarding information (for example, W-9 and 1099 data)
• Payroll and workforce information, where the payroll module is used
• State registration, tax, and compliance obligations and deadlines
• Documents you upload or that arrive through a connected mailbox (statements, filings, correspondence, and receipts)

Client Data is provided and controlled by the Client. We access it to deliver the Platform and the related services, not for our own independent purposes.

Automatically collected information

• IP address and approximate location derived from it
• Browser, device, and operating-system characteristics
• Log data, usage patterns, feature interactions, and timestamps
• Session and security cookies needed to keep you signed in (see Cookies, below)

2. Connected Accounts and Integrations

The Platform is designed to consolidate a Client's finance data. When a Client links a third-party system, the Client authorizes us to access data from that system on its behalf, and we store the resulting access tokens in encrypted form. Categories of connected systems include:

• Banking data providers — to retrieve bank and card transactions and balances
• Accounting platforms — to synchronize ledgers, invoices, bills, and reports
• Payroll and workforce systems — where the payroll module is enabled
• Document and mailbox sources — to ingest statements, filings, and correspondence
• E-signature and tax-filing services — for W-9 and 1099 workflows

A Client can disconnect any integration at any time. Disconnecting stops future data retrieval; data already ingested is retained and deleted in line with the Data Retention section below.

3. How We Use Information

• Provide, operate, secure, and maintain the Platform
• Process Client Data to deliver bookkeeping, reconciliation, reporting, compliance tracking, and payroll features
• Send transactional messages, reminders, and compliance-deadline notifications
• Authenticate users, prevent fraud and abuse, and enforce access controls and tenant isolation
• Provide support and respond to your requests
• Monitor performance, diagnose errors, and improve the Platform
• Comply with legal, tax, and regulatory obligations

4. Automated Processing and AI Features

The Platform uses automated logic — including deterministic rules and, in some features, AI models operated by our processors — to assist with tasks such as categorizing transactions, matching records, and surfacing suggestions. These outputs are tools to support the finance team; they are subject to human review and are not a final determination on their own.

Where AI processing is used, we route requests through providers under contractual terms that prohibit using your data to train their general-purpose models. We do not sell your data and do not use Client Data to build advertising profiles.

5. How We Share Information

We share information only as needed to run the Platform. We do not sell personal information. Categories of recipients include:

• Sub-processors / service providers — cloud hosting and database infrastructure, background-job processing, error monitoring, product analytics, and email delivery, each acting on our instructions under contract
• Connected third-party systems a Client authorizes (banking, accounting, payroll, document, and filing providers), whose own privacy terms govern their processing
• The responsible Client and the Authorized Users within its workspace, according to their assigned roles and permissions
• Legal and safety recipients — where required by law, subpoena, or to protect rights, safety, and the integrity of the Platform
• A successor in connection with a merger, acquisition, financing, or sale of assets, subject to this policy

A current list of sub-processors is available on request to the contact address below.

6. Data Isolation and Security

The Platform is multi-tenant. Each Client's workspace is logically isolated at the database layer so that data belonging to one Client is never exposed to another. Access to Client Data is scoped by workspace membership and role.

We apply appropriate technical and organizational safeguards, including encryption of data in transit and at rest, encryption of third-party access tokens, access controls, and monitoring. No method of transmission or storage is 100% secure, and Authorized Users are responsible for keeping their credentials confidential and accessing the Platform from secure environments.

7. Data Ownership and Retention

As between Finvisor and a Client, the Client owns its Client Data. We retain personal information and Client Data for as long as needed to provide the Platform, for the duration of the Client engagement, and as required to meet legal, tax, accounting, and regulatory obligations.

When data is no longer needed, we delete, anonymize, or securely isolate it from further processing. A Client may request export or deletion of its Client Data in connection with offboarding, subject to our legal retention obligations.

8. Cookies and Similar Technologies

The Platform uses cookies and similar technologies that are strictly necessary to sign you in, keep your session secure, remember your preferences, and operate core features. We may also use limited first-party analytics to understand how the Platform is used and to diagnose problems.

Because the Platform is an authenticated application rather than a marketing site, we do not use advertising cookies or cross-context behavioral tracking. You can control non-essential cookies through your browser settings; disabling strictly necessary cookies will prevent you from signing in.

9. Your Privacy Rights

Because much of the data on the Platform is Client Data that we process on a Client's behalf, requests about that data are generally directed to the responsible Client, and we will assist the Client in responding. For personal information we control, your rights depend on where you live.

EEA, UK, Switzerland, and Canada

• Access and receive a copy of your personal information
• Request correction or erasure
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing relies on consent

US state residents

Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — may:

• Confirm whether we process their personal information
• Access, correct, or delete their personal information
• Obtain a portable copy
• Opt out of any sale or targeted advertising (we do neither)
• Exercise these rights free of discrimination

To exercise a right, contact us at fran@finvisor.com. We will verify your request before acting on it.

10. International Data Transfers

The Platform is hosted in the United States. If you access it from another region, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Children's Data

• The Platform is intended for business use by adults 18 or older
• We do not knowingly collect information from anyone under 18
• If we learn that we have collected such information, we will delete it and deactivate the associated access

12. Changes to This Policy

We may update this Privacy Policy as the Platform and applicable law evolve. The "Last updated" date at the top reflects the latest version. Material changes will be communicated within the Platform or by direct notice.

13. Contact Us