This notice describes how FINAPP handles information submitted through the public website at www.finapp.ca. It does not replace the agreements and privacy terms governing a client's authenticated FINAPP workspace or Plaid relationship.
Information you choose to provide
The contact form collects your name, work email, organization, area of interest, project description and consent to be contacted. We use this information only to assess and respond to your inquiry, plan requested services and maintain appropriate business correspondence.
Technical and anti-abuse information
The website processes limited request metadata, including IP address, request time and a request identifier, to operate the service, prevent automated abuse, enforce rate limits and investigate failures. The contact form uses a one-time signed browser challenge, proof-of-work and a hidden anti-bot field. These controls do not profile visitors for advertising.
Cookies and analytics
The public website does not use advertising cookies, behavioural analytics or third-party tracking scripts. Normal infrastructure and security logs may be retained for a limited operational period.
How contact messages are handled
Contact submissions are transmitted to an access-controlled business mailbox. The website does not maintain a public lead database. Correspondence is retained only as reasonably required to answer the inquiry, deliver requested services, satisfy legal obligations or maintain business records.
Service providers
We use infrastructure and email service providers to host the website and deliver contact messages. Plaid is relevant only when a prospective client later chooses to establish an integration; the public contact form does not connect to Plaid or collect bank credentials.
Your choices
You may ask about, correct or request deletion of information provided through the website, subject to legal and business-record requirements. Use the secure project contact form and state that your request concerns privacy.
Security
We use transport encryption at the public proxy, restrictive browser security headers, request throttling, input limits and server-side validation. No internet transmission method can be guaranteed completely secure, so never submit passwords, Plaid secrets, bank credentials or API keys through the marketing contact form.
Contact
Use the FINAPP contact form for privacy questions. This avoids publishing a mailbox address that can be harvested by automated spam systems.