Privacy Policy

Who we are

Finally Financial Services Inc. (“Finally”, “we”, “us”) provides personal financial health reports to users in Canada and the United States. Because Finally handles financial information, we follow the financial-privacy and security laws that apply to us. In the United States, where it applies to us, that includes the Gramm-Leach-Bliley Act (GLBA) and its Safeguards Rule; in Canada, it includes the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws such as Quebec's Law 25. Either way, we hold ourselves to these standards because your financial information deserves that level of care.

Our Privacy Officer is responsible for how we handle your information and for our compliance with this policy. You can reach the Privacy Officer about this policy, your data, or any privacy concern at privacy@myfinally.com. For anything else, email support@myfinally.com.

What we collect

We collect three kinds of information:

• Waitlist and account information. Your email address and, if you choose to share them, your first name, last name, and country. We also note how you signed up so we know what's working.
• Financial data you upload. When you use Finally, you upload transaction files exported from your bank. These include transaction dates, descriptions, and amounts. From a statement we also keep your running balance, the last four digits of the account number, and, on a card or line of credit, the credit limit and available credit printed on it. We never ask for your banking username or password, and we never have access to your bank account. We treat this as your most sensitive information: it is encrypted in transit and at rest, access is tightly restricted to what's needed to generate your report, and you can delete it permanently at any time. See How we protect it for the detail.
• Usage information. With your consent, basic analytics about how the product is used, such as pages visited, features clicked, and anonymized session activity, so we can improve it. See Cookies and analytics below for what's optional and how to control it.

How we use it

• To generate your financial health report and personalized recommendations.
• To send you the emails you asked for, like waitlist confirmations and product updates, and to send you a receipt when you buy a report. Every email we send carries an unsubscribe link, and it takes effect immediately.
• To understand how people use Finally so we can make it better.
• To keep the service secure and prevent abuse.

Cookies and analytics

We use cookies and similar technologies for two purposes, and we ask before turning on anything that isn't essential.

• Essential cookies. These keep the site working and remember your cookie choice. They're always on because the service can't run without them, and they don't require your consent. A secure session cookie also lets your uploaded data become your report without forcing you to create an account. That's an essential cookie too.
• Optional analytics cookies. These help us understand how Finally is used so we can improve it. They stay off until you choose Accept all in our cookie banner. If you choose Essential only, we don't set them.

For analytics we use Vercel Web Analytics, which is privacy-friendly and does not use cookies, and, with your consent, PostHog and Google Analytics 4 (a Google service). With your consent, PostHog also records anonymized session activity such as pages viewed, clicks, and scrolling, which helps us see what's confusing. Text you type into forms is masked by default, and we never use this to identify you personally. Google Analytics and PostHog stay off until you choose Accept all in our cookie banner.

We also keep our own privacy-friendly count of page visits so we can measure overall traffic and how many visitors join the waitlist. It sets no cookie and we never store your IP address. We keep only a one-way, daily-rotating fingerprint derived from your IP address and browser, which lets us count unique visits for a single day and cannot be reversed or used to identify you.

You can change your mind at any time: clear the Finally cookie in your browser to bring the banner back, or use your browser settings to block or delete cookies. Blocking essential cookies may stop parts of the site from working.

What we never do

• We never sell your data. Not to advertisers, not to data brokers, not to anyone.
• We never share your financial data with third parties for their own marketing.
• We never call you to sell you financial products.
• We never store your bank credentials, because we never collect them.

When you choose to share a result

Your report includes a Share option on a few specific results, such as your score or the money we found you could keep. Nothing is ever shared automatically. You see the exact card before you send it anywhere, and if you never use the option, nothing about you is ever made public.

When you do use it, we create a link to a page that shows that one card. Here is exactly what that page can contain, and nothing else: a score and the word that goes with it, or an amount of money we found in your statements, or a count of how many times a merchant charged you and that merchant's name. It never contains your name, your email, your transactions, your balances, your income, a date, or any way to reach your account or your report.

Two things about the link are worth being plain about. Anyone who has it can open it. It is not password protected and it is not guessable, but it is public in the sense that a link you post is public, so treat it the way you would treat a screenshot. It stops working 90 days after you create it. After that the page is gone for everyone, including you.

We do not store the link, and we do not keep a record of what you shared or when. The information the page shows is carried inside the link itself and signed by us so it cannot be altered, which is why there is nothing on our side to look up, and also why we cannot recall a link once you have sent it. If you delete your account, the 90 day limit still applies to any link you already created, because there is no stored record for us to remove. And as with anything posted online, an image or a link that someone else has already copied or saved is beyond our reach and yours.

If you ask us to keep your score history

Everywhere else on this page we tell you that we work out your report fresh each time and hold on to as little as possible. There is one thing you can ask us to keep, and because it is the exception, we want to be direct about it.

We do not offer score history yet, so we keep none. When we do, it will work exactly as this section describes. If you have an account, you will be able to turn it on. When it is on, each time you run a checkup we save a small record of the result so that you can see whether your score is going up or down. It is off unless you turn it on, and turning it on is a choice you make deliberately, not something bundled into signing up.

Here is everything that record contains: your score and the word that goes with it, the five factor scores behind it, and a handful of monthly totals, being your typical money in versus out, what your lifestyle costs, how many recurring charges we found and what they add up to, and how many days your savings would cover. It also notes what we were able to see when we worked it out, such as how many months and which kinds of account, because without that a score from one checkup cannot honestly be compared with another.

And here is what it never contains: a transaction of any kind. Not a description, not a merchant, not a category, not a single amount, not a date you spent money, not a balance. Nothing in that record can tell us, or anyone, what you bought or where you went. The totals are month wide sums and nothing smaller.

You can turn it off whenever you like. When you do, we delete every record that was saved while it was on, in the same action. Turning it on does not reach backwards either: it starts from that moment, and checkups you ran before you agreed are not saved after the fact. Deleting your account removes all of it, as with everything else we hold about you.

How Finally gets better at reading statements

Bank statements describe the same shop in wildly different ways. One statement calls it SQ *BLUE BOTTLE #47, another calls it BLUE BOTTLE COFFEE. So that we get better at recognising them, Finally keeps a dictionary of merchant names and the kind of spending they usually are, and that dictionary is built from the statements people upload.

We are telling you this plainly because it is the one place where something learned from your file can outlast your file. It is worth being equally plain about how narrow it is.

A wording only enters the dictionary if it has appeared in at least three different people's uploads.That is the main protection, and it is a structural one rather than a promise: a shop name turns up across many unrelated statements, and your landlord's name does not. Anything seen once or twice never graduates, and is deleted.

Before that, we screen the wording and throw out anything that looks personal rather than commercial: e transfers and other person to person payments, payroll and benefits lines, email addresses, web links, anything with a long run of digits such as an account or card number, postal and zip codes, and the FROM or TO followed by what looks like somebody's name. Numbers are stripped out of what is kept, so a store number or a reference code cannot survive. We screen conservatively on purpose. Throwing out a genuine shop name costs us a slower dictionary; keeping one person's name would cost the trust this product runs on.

What the dictionary holds is a wording and a label, for example that BLUE BOTTLE is a coffee shop. It never holds an amount, a date, a balance, an account, or anything joining a wording back to you. It is not a record of your spending and it cannot be turned into one. The working notes behind it are deleted after 180 days.

How we protect it

Your data is encrypted both in transit and at rest. In transit, it travels over encrypted connections (TLS). At rest, it is stored encrypted with reputable cloud infrastructure providers in North America, using industry-standard encryption (AES-256). The file you upload is never saved. We read the transactions in it to build your report; those are encrypted and deleted on the schedule in How long we keep it.

Access is limited to what is strictly required to operate the service, and we never use your financial data for advertising or sell it to anyone. You can ask us to delete your data at any time, and when you do, it is removed permanently. No security measure is perfect, but we work to protect your information using safeguards appropriate to how sensitive it is.

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect your information, and we have designated an individual responsible for that program. That individual is our Privacy Officer. We review our safeguards as Finally grows.

If there's a data breach

If a security breach affects your personal information and creates a real risk of significant harm to you, we will notify you and the appropriate regulators as required by law, and tell you what happened, what we are doing about it, and what steps you can take to protect yourself. In Canada this includes reporting to the Office of the Privacy Commissioner of Canada (and, for Quebec residents, the Commission d'accès à l'information); in the United States we follow the breach-notification rules that apply to us. We keep records of security breaches as the law requires.

Service providers

We use a small number of trusted service providers to run Finally: cloud hosting and database, email delivery, product analytics, and an artificial intelligence provider. To create your financial health report, the transaction data you upload is processed by our AI provider (Anthropic) acting only on our instructions. Every provider is bound by a written agreement to process your data only to provide their service to us, to keep it confidential and secure, and never to use it for their own purposes.

AI does two jobs here: it sorts your transactions into categories, and it reads PDFs our software can't. Real, living people write and check the rules behind your score, every number and every move, and you can fix any category yourself.

Most statements we read on our own servers. Some PDFs are built in a way our software cannot read, and for those we send the statement itself to Anthropic, over an encrypted connection, to turn the page into a list of transactions. It goes as your bank wrote it, so the account details printed on the page travel with it, and it is used for that one step.

Wherever your data goes it travels over an encrypted connection, and it is stored encrypted. The most sensitive fields in your transactions are encrypted a second time by us, with a key that is never stored in the database. How we protect it.

Where your data is processed

Finally is operated from North America, and some of our service providers store or process data in the United States. This means your information may be transferred to, stored in, or accessed from a country other than the one you live in, including the United States, where it is subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, and government authorities there.

Before relying on a provider outside your province or country, we assess whether your information will receive a level of protection comparable to what it has under Canadian law, and we put contractual safeguards in place. If you are a resident of Quebec, we note specifically that your personal information may be communicated and stored outside Quebec, including in the United States, as described above. If you have questions about these transfers or want to know which jurisdictions are involved, contact our Privacy Officer at privacy@myfinally.com.

When the law requires it

We may disclose information in response to a search warrant, court order, or other legally valid request from Canadian or US authorities, to investigate or prevent fraud, or where otherwise required or permitted by law.

If our business changes hands

If Finally is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. It would remain subject to the commitments in this policy, and we would let you know before any different policy applied to you.

Your rights

You can ask us at any time to access, correct, or delete the personal information we hold about you, and to withdraw a consent you previously gave. Deletion is immediate and permanent. Just email privacy@myfinally.comand we'll take care of it. We respond to these requests within 30 days; if we ever need longer, we'll tell you why.

If you are in Canada, you have rights under PIPEDA and applicable provincial laws, including Quebec's Law 25. If you are in the United States, where the federal Gramm-Leach-Bliley Act (GLBA) applies, the financial information you share with Finally is protected under it, and you may also have rights under your state's privacy laws, such as the California Consumer Privacy Act (CCPA), for example the right to know what we collect, to delete it, and to opt out of its sale (which we never do). We honor these rights for all our users, regardless of where you live.

How to raise a concern or complaint

If you have a question or a complaint about how we handle your information, contact our Privacy Officer first at privacy@myfinally.com. We'll acknowledge your concern, look into it, and respond in writing, normally within 30 days. If we can't resolve it to your satisfaction, you have the right to escalate.

• In Canada, you can contact the Office of the Privacy Commissioner of Canada. If you live in Quebec, you can also contact the Commission d'accès à l'information.
• In the United States, you can contact your state attorney general or the relevant state privacy regulator, such as the California Privacy Protection Agency.

How long we keep it

We keep different information for different lengths of time:

• Waitlist and account information: until you ask us to remove you or close your account.
• Financial data you upload without an account: if you use Finally without creating an account, the data you upload is tied to a temporary private session and is automatically deleted from our systems within 24 hours. Where a PDF needed transcription, our AI provider deletes their copy under the agreement we have with them (see Service providers). Create an account if you'd like to keep your report so you can return to it.
• Financial data you upload and the report we generate from it: while your account is active, so you can return to your report. You can delete it at any time. When you delete it, or close your account, it is removed from our live systems immediately and purged from our encrypted backups within 30 days. Where a PDF needed transcription, our AI provider deletes their copy under the agreement we have with them.
• Checkups beyond the latest three, if you have a free account: a free account keeps your three most recent checkups open. Running checkups is never limited, and we do not delete the older ones. They stay on your account, listed by date, and you can unlock any one of them to open it again. Deleting your account removes them all. A checkup you have unlocked always stays open and is never counted against the three.
• Links you create with the Share option: 90 days from the moment you create one, after which the link stops working on its own. We do not store the link, so there is nothing on our side to delete. See When you choose to share a result.
• Your score history, if you turned it on: for as long as it is switched on, so you can see your score over time. It holds scores and monthly totals, never transactions. Switch it off and every saved record is deleted in the same action. See If you ask us to keep your score history.
• Your corrections and your own buckets: if you tell us a transaction is something other than what we read, or file transactions into a bucket you named, we keep that with your account so it applies again the next time you upload. Without an account, a correction lives only as long as the 24 hour session. What we keep is which transaction or which merchant, and where you moved it, never a new copy of the transaction itself. It is removed with everything else when you delete your account.
• Figures you type in that your statements do not carry: on an unlocked report you can tell us the interest rate on a debt, a loan balance, whether your employer matches contributions, a goal with its date, or a balance you hold elsewhere. Every one of them is optional. We keep them with your account, encrypted the same way as your transactions, so they are still there on your next checkup. They never feed the dictionary that helps us read statements. They are removed with everything else when you delete your account.
• Merchant wordings that appear across at least three different people's uploads: kept as part of the dictionary that helps us recognise shops, with the working notes behind it deleted after 180 days. It holds wordings and labels only, never amounts, dates or anything linking back to you. See How Finally gets better at reading statements.
• Screenshots you attach to feedback: 30 days from when you send one, then deleted, whether or not you have an account. Deleting your account removes them straight away, and so does Delete my data now for a screenshot sent during that checkup. The note you wrote is kept.
• Your email address, if you unsubscribe: added to a list of addresses we must never contact, so that we do not email you again. This is the one thing that stays even if you delete your account, and it exists only so your decision to stop hearing from us actually holds. It is your address and the date, nothing else. If you would like to be taken off that list and hear from us again, email us and we will do it.
• Minimal records we're legally required to keep: for example, records of a security breach, which we retain for the period the law requires before deleting them.

Children

Finally is not directed to anyone under 18, and we do not knowingly collect information from minors.

Changes to this policy

If we change this policy in a meaningful way, we'll update the date at the top and let you know by email if the change affects how we handle your data.

Contact

Privacy questions, requests, or concerns: privacy@myfinally.com. Anything else: support@myfinally.com.

You can also reach us by mail at:
Finally Financial Services Inc.
Finally Support
2967 Dundas St. W. #1743
Toronto, ON M6P 1Z2
Canada