Privacy Policy

FinRec Health CPA's LLC (“FinRec,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose, and protect information when users visit our website, contact us, create an account, subscribe to FinRec AI, or use FinRec AI.

1. Information We Collect

Contact Information

When someone contacts FinRec or submits a website inquiry, we may collect:

• name;
• work email address;
• organization;
• message or information voluntarily provided.

Users should not include patient information, PHI, passwords, payment-card information, or other sensitive personal data in website inquiries.

Account Information

If a user creates a FinRec AI account, we may collect:

• email address;
• account identifiers;
• authentication and session information;
• account status.

Authentication services may be provided by third-party service providers.

Subscription and Billing Information

If a user purchases a FinRec AI subscription, payment processing is handled by a third-party payment processor.

FinRec may receive:

• billing customer identifier;
• subscription identifier;
• subscription status;
• plan information;
• billing-period information;
• payment or invoice status.

FinRec does not receive or store complete payment-card numbers.

FinRec AI Content

When users use FinRec AI, we may process:

• questions and prompts;
• AI-generated responses;
• conversation history;
• conversation identifiers;
• feedback regarding responses;
• technical information necessary to operate the service.

FinRec AI uses third-party artificial-intelligence and infrastructure providers to process and maintain portions of this information.

Do not submit patient-identifiable information, PHI, or other sensitive personal data to FinRec AI.

FinRec AI is not intended to receive PHI.

Technical and Security Information

Certain technical information may be processed automatically as necessary to operate and secure the services, including:

• IP address;
• browser and device information;
• timestamps;
• request and error information;
• security and authentication events;
• cookies or similar technologies necessary for login, session management, and service functionality.

2. How We Use Information

FinRec may use information to:

• provide and operate the website and services;
• authenticate users and maintain accounts;
• provide FinRec AI conversations and conversation history;
• process subscriptions and manage access;
• respond to inquiries;
• provide customer support;
• maintain security and prevent abuse;
• diagnose technical problems;
• monitor service performance;
• enforce terms and policies;
• comply with legal obligations;
• evaluate and improve services.

3. PHI and Sensitive Personal Data

FinRec AI is not designed for submission of PHI or patient-identifiable information.

Users are instructed not to enter PHI or other sensitive personal data.

The warning displayed within FinRec AI is informational and does not represent automated detection or prevention of prohibited information.

If someone believes sensitive information was submitted inadvertently, they should contact:

info@finrechealth.com

4. How We Share Information

FinRec may disclose information to service providers that perform services on our behalf.

These providers may support:

• cloud hosting;
• authentication and account management;
• payment processing;
• email delivery;
• artificial-intelligence functionality;
• application infrastructure;
• security and technical operations.

The current technology stack may include providers such as Supabase for authentication/application data, Stripe for payment processing, Dify or related AI infrastructure for FinRec AI, Vercel for website/application hosting, and any transactional email provider configured for the Contact form.

Service providers receive information as reasonably necessary for the services they provide, subject to applicable agreements and policies.

FinRec may also disclose information:

• when required by law or legal process;
• to protect the rights, security, or property of FinRec, users, or others;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction;
• with user direction or consent.

FinRec does not sell personal information in exchange for money.

5. AI Processing

FinRec AI uses automated and artificial-intelligence technologies to generate responses.

Information submitted in an AI conversation may be transmitted to third-party technology providers involved in processing the request.

FinRec currently uses a server-derived account identifier when communicating with its AI conversation infrastructure rather than intentionally sending the user's email address as the FinRec AI user identifier.

AI-generated responses may be retained as part of conversation history.

Users should not use FinRec AI for information they are not authorized to disclose or that should not be processed through an AI service.

6. Payment Processing

Payments are processed by Stripe or another payment provider identified at checkout.

Payment providers process payment information under their own privacy policies and contractual obligations.

FinRec generally receives subscription and transaction-status information rather than complete card credentials.

7. Data Retention

FinRec retains information for as long as reasonably necessary to:

• provide the services;
• maintain account and subscription records;
• satisfy legal, accounting, tax, contractual, or compliance requirements;
• prevent fraud or abuse;
• resolve disputes;
• maintain security;
• enforce agreements.

FinRec AI conversation history may remain available until deleted by the user, removed by FinRec, or deleted under applicable provider-retention processes.

Deletion through the user interface may not immediately remove information contained in backups, logs, security records, or records FinRec is required to retain.

8. Data Security

FinRec uses administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration.

No internet-based service or method of electronic storage can be guaranteed completely secure.

Users are responsible for maintaining the confidentiality of account credentials.

9. User Choices and Rights

Depending on applicable law and location, users may have rights regarding personal information, including rights to request access, correction, deletion, or information about processing practices.

Privacy requests may be sent to:

info@finrechealth.com

FinRec may need to verify identity before fulfilling a request.

Certain information may be retained where necessary for legal, security, contractual, accounting, or other legitimate requirements.

Users may also delete individual FinRec AI conversations through available product functionality.

10. Cookies and Similar Technologies

FinRec may use cookies or similar technologies necessary for:

• authentication;
• maintaining sessions;
• protecting accounts;
• remembering essential service state;
• operating website functionality.

If analytics, advertising, or other non-essential tracking technologies are later introduced, this Privacy Policy and any required consent mechanisms must be updated.

11. Third-Party Links

The website may contain links to third-party websites or services.

FinRec is not responsible for privacy practices or content of third-party websites it does not control.

12. Children's Privacy

FinRec's services are intended for business and professional users and are not directed to children under 18.

FinRec does not knowingly solicit personal information from children through FinRec AI.

13. Changes to This Policy

FinRec may update this Privacy Policy from time to time.

When material changes are made, FinRec may provide notice through the website, service, email, or another reasonable method.

The effective date indicates when the current version became effective.

14. Contact

Questions or requests regarding this Privacy Policy may be directed to:

FinRec Health CPA's LLC info@finrechealth.com