Privacy & Cookie Policy

1. Introduction

Welcome to FinHisaab ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using FinHisaab, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when you register for an account, use our services, subscribe to our newsletter, or contact us. This may include your name, email address, and financial preferences.

2.2 Automatically Collected Information

When you visit our website, we automatically collect device and usage information including IP address, browser type, pages visited, and user interactions.

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze usage, and deliver relevant content. Cookies are small text files stored on your device that help us:

• Essential: Enable core functionality like authentication and security
• Analytics: Understand how visitors interact with our website
• Functionality: Remember your preferences and settings
• Marketing: Track advertising effectiveness (Meta Pixel/Facebook Pixel)

You can control cookies through your browser settings. Note that blocking cookies may impact some features. Most browsers allow you to view, delete, and block cookies in their settings.

To opt out of personalized advertising, visit Meta Ad Preferences or use browser opt-out tools like Digital Advertising Alliance.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services
• To improve and personalize your experience
• To process transactions and manage your account
• To send you technical notices, updates, and security alerts
• To respond to your comments, questions, and customer service requests
• To send you marketing and promotional communications (with your consent)
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information with service providers that help us operate and secure FinHisaab, including hosting, authentication, analytics, error monitoring, and email providers; for legal compliance; or during a business transfer.

If you connect an AI assistant, information you ask it to retrieve from FinHisaab is returned to that assistant so it can answer you. The AI provider handles your conversations and any data you share with it under its own terms and privacy policy. Review those terms before connecting or requesting private portfolio information.

5. Sign-in and AI assistant connections

5.1 Google sign-in

If you sign in with Google, we only access your email address and public profile information for authentication. We do not access Gmail, Google Drive, or other services.

You can revoke access anytime through Google Account Permissions.

5.2 WorkOS OAuth for MCP

When you connect FinHisaab to an AI assistant using OAuth, WorkOS AuthKit handles the sign-in and authorization flow. FinHisaab receives the basic identity information needed to associate the connection with your FinHisaab account, such as your account identifier and the name or email claims requested for sign-in. FinHisaab does not receive your WorkOS or FinHisaab password through the MCP connection.

The AI client sends FinHisaab individual MCP requests when it uses a FinHisaab tool. A request can include the stock, fund, market, or other parameters needed for that request; the MCP connection does not give FinHisaab access to the rest of your conversation. FinHisaab returns the requested result to the AI client, which may use it in its response and process or retain it under the AI provider's own policies.

MCP access to your private portfolio is off unless you enable it in your FinHisaab profile settings. When enabled, authenticated MCP tools can return bounded portfolio summaries and selected holdings, allocation, performance, or recent-activity information for your own account. They cannot place trades or change your portfolio. You can turn portfolio access off in those settings to block future MCP portfolio reads; this setting is separate from disconnecting the AI client.

To operate and protect the MCP service, we may log technical request and usage details such as the tool used, request identifiers, authentication mode, response status, timing, result counts, and relevant filter or metric parameters. These records help us monitor reliability, investigate errors, and prevent abuse, and are handled under the retention practices described below.

6. Data Security and Retention

We implement security measures including encryption, access controls, and secure data storage to protect your information. However, no internet transmission is 100% secure.

We retain your data only as long as necessary for the purposes outlined in this policy, then securely delete or anonymize it.

7. Your Privacy Rights

You have the right to access, correct, delete, or transfer your personal information. You may also object to processing or withdraw consent at any time.

To exercise these rights, contact us at contact@finhisaab.com.

8. Children's Privacy

Our services are not for individuals under 18. We do not knowingly collect information from children. If your child has provided us with information, please contact us to delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. Check the "Last Updated" date above for changes. Continued use after changes constitutes acceptance.

10. Contact Us

Questions about this Privacy Policy? Contact us:

• Email: contact@finhisaab.com
• Support: Contact Us Page