FinBizDoc

Legal

Privacy policy

Data minimisation is the design principle: collect the least, send the least, keep it the shortest time, and make deletion a first-class feature.

Version
v1.0.0
Effective
Last updated

This policy covers the FinBizDoc web application and this website. Read it with the terms of use, cookie policy and subprocessors page.

1. Summary in one paragraph

You sign in with an email address or Google. You upload a bank statement or ledger. Sensitive identifiers are masked before any AI sees it. The AI produces a draft extraction only; you review and confirm it; a deterministic engine does every calculation. Nothing is sold, nothing is used for advertising, no document content is written to logs, and you can delete any of it — or all of it — at any time.

How the AI reads your documents

The short version: our own code does the reading and the arithmetic, the AI only puts labels on masked text, and you confirm everything before it counts.

  1. 1Step 1

    Your file lands in private storage

    Uploads go straight into a storage area only your account can open. No public link is ever created.

  2. 2Step 2

    Our server reads it, not the AI

    CSV, XLSX and digital-PDF text are parsed by ordinary code. Every date, amount and balance we use comes from this step.

  3. 3Step 3

    Personal details are removed before any AI call

    Account numbers, GST registration numbers, PAN numbers, IFSC codes, card numbers, Aadhaar numbers and more are replaced by type tokens. You can add names, addresses and reference codes, or withhold description text entirely.

  4. 4Step 4

    The AI only labels — it never calculates

    The model is asked one narrow question: which column or line name belongs to which group. It cannot add, change or invent a number.

  5. 5Step 5

    You review every line before anything counts

    Extraction produces a draft. Nothing enters your dashboards, ratios or reports until you confirm it — there is no path that skips this.

  6. 6Step 6

    Every figure is computed by our own formulas

    Totals, ratios, EMIs and readiness scores are produced by versioned, tested code you can inspect in the formula library.

Before processing starts you get a panel listing exactly which columns would be sent, how many personal values were found in each category, and which text would be withheld — with an option to redact more. After extraction, the same summary is kept with the draft so you can always check what was analysed. Masked content is never displayed and never stored in the extraction record.

The AI never reads your personal details

Before a single line is sent to the AI, account numbers, PAN, Aadhaar, card numbers, phone numbers, email addresses, UPI handles and IFSC codes are replaced on our server. Dates and amounts stay, because those are the only things the AI is asked to label.

Sent to the AI (personal details hidden)

02 Apr 2026 UPI/[UPI_ID]/INV-3391 A/c [ACCOUNT] CR 1,25,000.00

05 Apr 2026 NEFT SALARY ANIL KUMAR PAN [PAN] DR 55,000.00

09 Apr 2026 CARD [CARD] Supplier payment DR 18,400.50

14 Apr 2026 Contact [PHONE] / [EMAIL] IFSC [IFSC] CR 42,000.00

Masked before the AI call: 1 UPI handles, 1 account numbers, 1 PAN numbers, 1 card numbers, 1 email addresses, 1 IFSC codes, 1 phone numbers.

Paste one row from your statement. This runs entirely in your browser — it is never uploaded, stored or sent to any AI.

2. What is collected

  • Account data: the email address used to sign in, display name and profile image if you use Google sign-in, plus timestamps.
  • Documents you upload: stored in a private bucket, readable only by you.
  • Derived financial data: extracted transactions, categories, calculated snapshots, ratios, readiness assessments, saved scenarios, comparisons and reports.
  • Values you type: calculator inputs and assumption notes you choose to save.
  • Consent records: when you agreed to AI processing of a given document.
  • Usage metadata: counts, timings, model version and formula version — for rate limiting and auditability, without document content.
  • Technical data: minimal request logs needed to operate and secure the service.

3. Why we process it (lawful bases)

  • Contract / your request: to run the analysis, calculations and reports you ask for.
  • Consent: to send masked document text to the AI provider for extraction, and to retain an original document if you opt into retention. Consent can be withdrawn at any time.
  • Legitimate interests: security, abuse prevention, rate limiting and keeping the service reliable.
  • Legal obligation: where a law requires us to keep or produce records.

4. Masking: what the AI actually receives

Masking happens on the server before any model call. Bank and card account numbers are reduced to their last few digits; PAN, Aadhaar-like and similar identifier patterns are replaced with placeholders. For explanations, the model receives only the figures the deterministic engine has already computed — not your whole statement. Prompts containing unmasked personal data are not stored. Instructions embedded in a document are treated as data, never as commands — see prompt-injection defence.

5. What is never collected

  • Internet-banking credentials, passwords for your bank, PINs or OTPs — no screen asks for them.
  • Full card numbers or CVVs.
  • Document contents in application logs.
  • Location tracking, contacts, or device identifiers for advertising.

6. The AI never decides anything authoritative

Every number shown to you is produced by versioned deterministic code, after you confirm the inputs. The AI layer cannot skip the review step, cannot alter confirmed values, and does not produce credit decisions. See responsible AI.

7. Retention

DataHow long it is kept
Original uploaded documentDeleted right after processing and your confirmation, unless you choose to retain it in privacy settings
Extracted transactions and categoriesUntil you delete them or delete the analysis
Calculated snapshots, ratios, assessments, reportsUntil you delete them
Saved scenarios and comparison notesUntil you delete them
Account and profile recordUntil you delete your account
Consent and deletion audit metadataRetained as a record of what happened, without any document content
Operational usage countersRolling short window for rate limiting

8. Your controls in the product

  • Delete an original document.
  • Delete extracted transactions.
  • Delete generated assessments and reports.
  • Delete everything associated with an analysis in one action.
  • Choose whether originals are retained after processing.
  • Sign out of all devices by revoking your session.

A deletion event records what was deleted and when, as audit metadata. It does not retain the deleted content.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict or object to processing, delete your data, and withdraw consent. Most of these are self-service in privacy settings; for anything else, contact us at finbizdoc@outlook.com and we will respond within a reasonable period, normally 30 days. You may also complain to your local data protection authority.

10. Sharing

Data is shared only with the providers listed on the subprocessors page, and only for the purposes stated there. We do not sell data, do not share it with lenders, credit bureaus or data brokers, and do not use it for advertising or to train third-party models on your behalf.

11. Security

Private storage, encryption in transit and at rest, row-level security on every user-owned table, ownership checks inside every server function, short-lived signed URLs and server-side-only secrets. Full model: security page. If a breach affecting you occurs, we will notify you and any required authority without undue delay.

12. Children

The service is not intended for anyone under 18. We do not knowingly collect data from children; if you believe we have, contact us at finbizdoc@outlook.com and it will be deleted.

13. International transfers

Providers may process data outside your country, relying on their standard contractual safeguards. Masking limits how much identifiable content can be transferred at all.

14. Changes to this policy

Changes are reflected in the “last updated” date, and material changes are surfaced in the product before they take effect where practical.

15. Contact

Privacy questions, access or deletion requests: use the contact page.