Last updated: October 5, 2026
Welcome to Finthian ("Finthian," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use the Finthian web application (the "Service"). We aim to collect and process only data that is useful for features you choose to use, including generating insights for you.
Finthian is developed and operated from the Netherlands. Finthian, with registered address Not yet registered, is the data controller responsible for your personal data. For questions or to exercise your privacy rights, contact [email protected].
Account and authentication information. Clerk provides sign-up, sign-in, and session management. Depending on the method you choose, Clerk may process your name, email address, profile image, authentication identifiers, and security or session information. If you use Google social sign-in, Google and Clerk process the account information required to authenticate you. We do not receive or store your Google password or any password handled by Clerk.
Financial information you choose to provide. You decide what to enter, including income, payslips, expenses, debts, savings, financial goals, transactions, account balances, and net worth details. We use this information to provide calculations, projections, summaries, and insights for you. We do not connect to your bank accounts or automatically import bank transactions unless we introduce and clearly disclose such a feature in the future.
Optional payslip extraction. Premium users may choose to upload a payslip PDF to help fill the payslip form. The PDF file itself stays in your browser and is not uploaded as a file. Your browser extracts page-scoped text lines and sends them to our Income Service. Before any provider request, our server applies an allowlist-based minimization step that keeps only supported payroll labels and numeric or date values. It removes unrelated text and direct identifiers, including employee and employer names, email addresses, phone numbers, postal codes, account numbers, employee identifiers, filenames, and other unsupported content. The resulting minimized and de-identified payroll payload may include pay period, gross and net pay, tax, pension, insurance, holiday allowance, and 30-percent-ruling values.
When you use this optional feature, the minimized and de-identified payload is sent to Anthropic as our service provider solely to extract those fields. We do not include your raw PDF, filename, name, employer, user ID, household ID, or session ID in that provider request. You can always use manual entry instead. Automated extraction may fail or be inaccurate, and you should review the form before saving it.
Household information and household sharing. If you create or join a household, goals and financial details you explicitly add in the household context are visible to other household members. Information kept in your personal context is not shared with household members. You control whether supported items are personal or household-visible.
Subscription and billing information. Stripe processes subscription payments and related billing information. We receive limited subscription status, customer, invoice, and transaction information needed to operate paid features. We do not receive or store your full payment-card number.
Usage, device, and diagnostic information. If optional analytics is enabled for you, PostHog and Google Analytics may process information such as pages or features used, approximate location derived from IP address, browser and device information, referral information, and interaction events. We do not intentionally include the values you enter in financial fields, payslip contents, or provider payloads in analytics events. Essential operational logs and security records may include request metadata, timestamps, service errors, and IP addresses, but our payslip parsing logs and metrics are designed not to contain document text, financial amounts, or identity values.
We use personal data to:
Where applicable, our legal bases include performance of our contract with you, your consent for optional analytics, our legitimate interests in securing and improving the Service, and compliance with legal obligations. You may withdraw consent for optional analytics without affecting the core Service.
We use service providers to operate specific parts of the Service. Provider processing on our instructions is not a sale of your data and does not permit providers to use financial data for their own advertising. Our current providers include:
We may also disclose information when required by law, to protect rights or safety, in connection with a corporate transaction subject to appropriate safeguards, or when you direct us to share it through a feature such as household sharing.
We do not sell personal data. We do not share financial data with third parties for advertising, targeted advertising, or data-broker purposes, and we do not use financial data to build advertising profiles. We will not use or share financial data for advertising in the future.
Under Anthropic's current commercial API terms, API content is not used to train its models unless a customer expressly opts into a separate program; we do not opt your payslip payloads into model training. Anthropic may retain API inputs and outputs for abuse monitoring for up to 30 days unless different contracted terms apply to our account. Anthropic may retain content longer when needed to enforce its Usage Policy or comply with law. Provider practices and contracted terms can change, so we will update this policy if a material change affects this processing.
Finthian does not store the uploaded PDF file. The extracted values you review and save become part of your Finthian financial data. Provider requests are transient application processing and are not written to our application logs or analytics.
We use essential technologies needed to operate the Service, including Clerk session cookies, language preferences such as NEXT_LOCALE, and regional or consent settings such as geo_region.
Optional analytics may use cookies or similar technologies from PostHog and Google Analytics. Where consent is required, you can accept or decline optional analytics from the consent controls and change your choice later in Settings. Declining optional analytics does not prevent you from using core financial features.
We retain account and saved financial data while your account is active and as needed to provide the Service. You can delete individual supported records or permanently delete your account from Settings. You may also request deletion by contacting [email protected]. We aim to complete verified deletion requests within 30 days, except where retention is required for legal, accounting, fraud-prevention, security, or dispute-resolution purposes.
Service providers retain information according to our contracts and their applicable service terms. Anthropic's specific default retention for the optional payslip payload is described above. Stripe may retain transaction and billing records as required by financial or tax law. Backup copies may remain for a limited period before being overwritten and are protected from ordinary use.
We use technical and organizational measures intended to protect personal data, including TLS/HTTPS in transit, access controls, secure session handling, separation between personal and household contexts, server-side authorization, and data-minimization controls for optional payslip extraction. No system is completely secure, and we cannot guarantee absolute security.
We operate from the Netherlands. Some service providers may process data in other countries. Where required, we rely on appropriate transfer mechanisms and contractual safeguards, such as adequacy decisions or standard contractual clauses. Contact [email protected] for more information about relevant safeguards.
Depending on your location, you may have the right to:
Because Finthian is operated from the Netherlands, we extend GDPR-style account-data requests to all users where practicable. Additional local rights may apply. To exercise a right, contact [email protected]; we may need to verify your identity.
The Service is intended for adults and is not directed to children. You must be at least 18 to create an account. If we learn that we collected a child's personal data contrary to this requirement, we will take steps to delete it.
We may update this Privacy Policy when the Service, providers, or legal requirements change. We will publish a new version and provide notice of material changes as required. A previously accepted policy version remains an immutable record of the terms presented at that time.
Questions, requests, or complaints about privacy can be sent to:
[email protected]
Finthian
Not yet registered
Not yet registered
Not yet registered