Legal · Data Protection
Privacy Policy
How FinFilt collects, uses, and protects personal data across our financial news filtering and signal dashboard, in line with GDPR and CCPA/CPRA.
FinFilt ("FinFilt," "we," "us," or "the Company") operates finfilt.com and related applications (the "Services"), a subscription-based financial news filtering and signal dashboard for retail and professional traders. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Services, and describes your rights under the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), as well as other applicable data protection laws.
Data We Collect
We collect only the data reasonably necessary to operate a paid financial data service.
Account & identity data
- Name, email address, and password (or SSO identifier)
- Billing address and tax jurisdiction (for invoicing/VAT)
- Subscription tier and account status
Usage & configuration data
- Saved filters, watchlists, keyword alerts, and dashboard configurations you create
- Feature usage, session logs, click and interaction data (analytics, abuse prevention)
- Device type, browser, IP address, and approximate geolocation (from IP, not GPS)
Communications data
Support tickets, emails, and any content you voluntarily submit to us.
We do not knowingly collect
- Brokerage credentials, trading history, or portfolio holdings — unless you explicitly connect a third-party account via an integration you affirmatively enable
- Government ID, financial account numbers, or health data
- Any special category data under GDPR Art. 9
Legal Basis for Processing
Applicable to users in the EEA/UK under Art. 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Providing the Services, billing | Performance of a contract |
| Fraud/abuse prevention, service security | Legitimate interests |
| Product analytics, service improvement | Legitimate interests |
| Marketing communications | Consent (opt-in; withdrawable anytime) |
| Tax/accounting record-keeping | Legal obligation |
Where we rely on legitimate interests, we have assessed that this interest does not override your fundamental rights and freedoms. You may object to processing based on legitimate interests at any time — see 'Your Rights'.
How We Use Your Data
- To operate, maintain, and personalize the dashboard (e.g., your saved filters and alerts)
- To process subscription payments and manage billing
- To send service notifications (required) and marketing communications (optional, consent-based)
- To monitor for fraudulent use, unauthorized access, or abuse of the Services
- To analyze aggregate usage trends to improve filtering accuracy and product features
How We Share Your Data
We do not sell your personal information, as "sell" is defined under the CCPA/CPRA, and we do not share it for cross-context behavioral advertising.
We disclose data only to:
- Service providers acting on our instructions under data processing agreements (hosting, payment processing, customer support tooling, analytics)
- Financial news/data licensors, only to the extent necessary to authenticate your access to licensed feeds — we do not sell your identity to these providers
- Law enforcement or regulators, where required by valid legal process
- A successor entity, in the event of a merger, acquisition, or asset sale, subject to continued protection under this Policy
International Data Transfers
Where personal data is transferred outside the EEA/UK (e.g., to servers or service providers in the United States), we rely on the European Commission's Standard Contractual Clauses (SCCs) or another valid transfer mechanism, and we implement supplementary technical and organizational safeguards as required by applicable guidance.
Your Rights
GDPR — EEA / UK users
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your supervisory authority
CCPA/CPRA — California residents
- Know what personal information we collect, use, and disclose
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of sale/sharing (not applicable in practice — we do neither)
- Limit use of sensitive personal information
- Non-discrimination for exercising these rights
To exercise any right, email [email protected] or use the in-app privacy request form at finfilt.com/privacy-requests. We verify identity before fulfilling requests and respond within the statutory timeframe (30 days GDPR / 45 days CCPA, each extendable once with notice).
Data Retention
| Data type | Retention period |
|---|---|
| Active account data | Duration of active subscription + 90 days |
| Inactive/dormant accounts | Deleted or anonymized after 12 months of inactivity, with prior notice |
| Billing/tax records | 7 years (statutory requirement) |
| Support communications | 24 months |
| Server/security logs | 12 months |
You may request earlier deletion under 'Your Rights', subject to legal retention obligations (e.g., tax law).
Security
We implement industry-standard technical and organizational measures, including:
- TLS/HTTPS encryption in transit; AES-256 encryption at rest
- Access controls and role-based permissions on internal systems
- Regular security testing and vendor due diligence
In the event of a data breach affecting your personal data, we will notify affected users and, where required, the relevant supervisory authority, within 72 hours of becoming aware, consistent with GDPR Art. 33–34 and applicable US state breach notification laws.
No system is fully secure; we cannot guarantee absolute security of data transmitted over the internet.
Cookies & Tracking
- Strictly necessary cookies — session management, login. Cannot be disabled without breaking core functionality.
- Analytics cookies — used to understand aggregate usage; you may opt out via the cookie preference center or browser settings.
- No third-party advertising cookies are used on finfilt.com.
You can manage cookie preferences via our cookie banner or your browser settings. Disabling non-essential cookies will not affect your ability to use paid features.
Children's Privacy
The Services are intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn we have inadvertently collected such data, we will delete it promptly. This is a financial data product and is not directed at minors under any circumstances.
Policy Changes
We will notify users of material changes at least 14 days in advance via email and/or an in-app notice before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the revised Policy.
Contact Us
| [email protected] |