Privacy notice

Framework version: 7 October 2026. Applies to FINMOND Intelligence.

Operator: FINMOND Global Limited. Contact: admin@finmond.co.uk.

Information we process

Account name, email and password hash; session and verification records; research briefs; project and report history; source URLs, extracts and retrieval dates; monitoring baselines, changes and alerts; subscription identifiers and usage; email delivery records; and security audit events. Stripe processes payment details in its hosted checkout and portal. FINMOND Intelligence does not collect full card details.

Purposes and legal bases

We process account, project and delivery information to provide the service and administer your subscription or order. We maintain limited security, operational and abuse-prevention records for our legitimate interests in protecting the service. Relevant billing records may also be kept to meet legal obligations. Optional marketing requires a separate permission; transactional research and account emails are part of service delivery.

Providers and transfers

The configured hosting service stores the application and private artifacts; OpenAI processes relevant briefs and source evidence for research; Stripe handles checkout and billing; the configured SMTP provider delivers account, report and alert emails. Public websites may receive requests for research and monitoring. Provider regions and international transfer safeguards must be documented by the operator for the actual deployed configuration. Configured provider disclosure: OpenAI, Stripe (test mode), configured hosting and email providers. Hosting region: Oregon, United States.

Access and retention

Projects and reports are accessible to their client and authorized owner reviewers. Reports remain in account history until an approved deletion request or account closure process removes them. Expired sessions and authentication tokens can be removed by scheduled maintenance. Delivery body retention is 30 days after successful delivery; the operator must run the retention command to enforce this period. Financial and audit records are retained only for documented operational or legal needs. Encrypted backups follow the operator's backup schedule and deletion window; no indefinite retention guarantee is made.

Your choices and rights

Contact the operator to request access, correction, export, deletion or restriction, or to object where applicable. Identity will be checked before private records are disclosed or changed. Some billing or security records may need to be retained; the operator will explain applicable exceptions. You may complain to your local data protection authority. Automated research assists commercial decisions; it does not make legal or similarly significant decisions about individuals.

Cookies

Essential cookies maintain authenticated sessions and protect forms against cross-site requests. This V1 framework does not include optional advertising or tracking cookies. Additional analytics require updated disclosures and consent where applicable.