Finsemble ("we," "us," or "our") operates the Finsemble application (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use Finsemble.

1. What Data Finsemble Accesses

Finsemble accesses the following data to provide the Service:

Financial data (accessed, not stored):

• Bank account balances, transaction history, recurring payments, and investment holdings, retrieved from your bank via Plaid with your explicit authorization and written directly to your Google Sheet. This data is not stored on Finsemble's servers beyond what is temporarily required to complete each sync.

Account and operational data (stored to operate the Service):

• Your Google account name and email address, obtained through Google OAuth 2.0 authentication
• Your sync preferences, schedule, and sheet configuration
• Sync history and timestamps
• Stripe billing identifiers (your payment card details are handled by Stripe directly and never stored by Finsemble)

2. How Data Flows Through Finsemble

Your financial data moves through the following pipeline:

Your bank → Plaid → Finsemble → Your Google Sheet

Finsemble acts strictly as a data pipeline. We do not:

• Store your financial data beyond what is transiently needed to complete each sync
• Analyze your financial data for internal use
• Sell, share, or rent your financial data to third parties
• Use your financial data to train models or for any purpose other than populating your Sheet

Your account data (email, sync preferences) is used only to operate and personalize the Service and to send transactional emails such as welcome emails and sync notifications.

3. Your Data, Your Control

You own your financial data.

The Google Sheet created by Finsemble is stored in your Google Drive and is fully under your control. You can edit, share, copy, or delete it at any time. If you stop using Finsemble, your sheet remains in your Drive, your data stays with you.

Finsemble can only access Google Drive files that it creates. It cannot access any other files in your Drive.

4. Google API Services, Limited Use Disclosure

Specifically, Finsemble:

• Only accesses Google user data necessary to provide the Service (Google Sheets creation and management, Google Drive file access)
• Does not use Google user data for advertising or marketing purposes
• Does not sell, rent, or share Google user data with third parties, except as necessary to provide the Service
• Does not use Google user data for purposes unrelated to the core functionality of Finsemble
• Allows users to revoke access at any time through their Google Account settings or through the Finsemble application

5. Data Storage and Security

Your financial data is processed through our secure backend hosted on Google Cloud Run and temporarily stored in Google Cloud Firestore. Your Google Sheet is stored in your own Google Drive, you own and control this file.

• Bank credentials are never stored by Finsemble. All bank authentication is handled securely by Plaid.
• Data in transit is encrypted using TLS/SSL.
• We use Google Cloud's enterprise-grade infrastructure with built-in security controls.
• Access tokens are stored encrypted in Firestore and are only used to maintain your bank connections.

6. Third-Party Services

Finsemble integrates with the following third-party services:

• Plaid: To securely connect to your bank accounts and retrieve financial data. Plaid's privacy policy is available at plaid.com/legal.
• Google: For OAuth authentication, Google Sheets API, and Google Drive API. Google's privacy policy is available at policies.google.com/privacy.
• Resend: For transactional email delivery.
• Stripe: For payment processing. When you subscribe to a paid plan, your payment information is handled directly by Stripe and is never stored on Finsemble's servers. Stripe's privacy policy is available at stripe.com/privacy.

7. Data Sharing

We do not sell, trade, or rent your personal or financial information to third parties. We only share data with:

• Plaid, as necessary to retrieve your financial data
• Google, as necessary to create and manage your Google Sheet
• Service providers who assist in operating our Service (e.g., email delivery), under strict data protection agreements

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your Firestore user record is deleted
• Your Plaid access tokens are revoked
• Your Google Sheet remains in your Google Drive (you control this file)

9. Your Rights

You have the right to:

• Access the financial data we hold about you (it's in your Google Sheet)
• Request deletion of your account and associated data
• Disconnect bank accounts at any time
• Revoke Google access through your Google Account settings
• Export your data at any time (your Google Sheet is already in your Drive)

10. Children's Privacy

Finsemble is not intended for use by children under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Third-Party Financial Data Services

Finsemble uses Plaid Technologies, Inc. ("Plaid") to connect your financial accounts and retrieve account and transaction data. By connecting your financial accounts through Finsemble, you acknowledge and agree that your data will be handled in accordance with Plaid's Privacy Policy.

Plaid's services allow Finsemble to access your financial account information, including account balances, transaction history, and account identifiers. Finsemble receives this data in a read-only capacity and does not store your bank login credentials. Your credentials are entered directly into Plaid's secure interface and are never transmitted to or stored by Finsemble.

For questions about how Plaid handles your data, please refer to Plaid's Privacy Policy or contact Plaid directly at privacy@plaid.com.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

14. Analytics

We use Google Analytics to understand how visitors interact with our marketing site (finsemble.app). Google Analytics uses cookies to collect aggregated information such as pages visited, time on site, and referral source. This data helps us improve the site.

The data Google Analytics collects on our marketing site is separate from your financial data. Your bank transactions and financial information are stored in your own Google Drive and are never sent to Google Analytics.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

For more information about how Google Analytics handles data, see Google's privacy policy.