Legal

Privacy notice

Last updated 13 September 2026

This document is a working draft and has not yet been reviewed by a solicitor. If you need a signed version for your records, please contact us.

In this document “we”, “us” and “FIINO” mean FIINO .

Who this notice is for

This notice covers personal data we hold as a controller: about people who visit this website, sign up, or use FIINO as staff of a customer firm. It does not cover the data your firm puts into FIINO about its own clients and employees — for that data your firm is the controller and we are its processor, under our data processing agreement.

What we collect

Account data: name, email address, password (stored only as a salted hash), two-factor settings.
Firm and organisation data: firm name, subdomain, branding, plan and billing contact.
Billing data: handled by our payment provider, Stripe. We do not store card numbers.
Support data: tickets and messages you send us, and the page and browser you raised them from.
Security data: sign-in times, IP addresses and audit records of actions taken.

Why we use it, and our lawful basis

To provide the service you signed up for — contract.
To bill for subscriptions and keep financial records — contract and legal obligation.
To secure accounts, prevent abuse and investigate incidents — legitimate interests.
To answer support requests — contract and legitimate interests.
To send service emails such as password resets and invitations — contract.

We do not sell personal data, and we do not use it for advertising.

Who we share it with

Service providers that help us run FIINO, under contracts that require them to protect it: hosting, email delivery (Resend), payments (Stripe) and error monitoring where enabled. We share data with authorities only where the law requires it.

International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum.

How long we keep it

Account data for as long as your account is active, then for up to 12 months to allow reactivation and resolve disputes. Billing records for six years to meet UK tax law. Security logs for up to 12 months.

Your rights

You can ask for access to, correction of, or deletion of your personal data, object to or restrict how we use it, and ask for a copy in a portable format. Raise a ticket from inside FIINO or use our contact page. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

See our cookie notice.