This Privacy Policy explains how FynOps, Inc., a Delaware corporation based in Florida (“FynOps,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you visit fynops.com, use the FynOps application, or use related products, support, and services (collectively, the “Services”).

FynOps provides financial operations software to businesses and their authorized users. A customer organization controls the workspaces it creates, the people it authorizes, and the third-party services it connects. If you use FynOps through an organization, that organization may control your account and the business data processed in its workspace.

Information We Collect

We collect information in the following categories:

• Account and profile information: name, business email address, telephone number, job title, login identifiers, organization, workspace membership, roles, and preferences.
• Business and financial information: company records, charts of accounts, transactions, invoices, payments, reports, operational records, and other content submitted to or generated through the Services.
• Connected-service data: information retrieved from services you authorize, such as accounting, banking, commerce, file-storage, email, and calendar providers. The information available depends on the provider, permissions you grant, and configuration you choose.
• Files and communications: files, messages, support requests, feedback, and other content you upload or send to us.
• Billing information: subscription, invoice, and transaction details. Payment card information may be collected directly by our payment processor rather than stored by FynOps.
• Device, usage, and security information: IP address, browser and device type, operating system, pages and features used, timestamps, diagnostic events, audit activity, authentication events, and information needed to prevent abuse and keep the Services secure.

We collect information from you, your organization, users you authorize, connected services, and automatically through your use of the Services. We do not intentionally collect sensitive personal information that is unrelated to providing business financial operations services.

Google Workspace Data

If you choose to connect Google Workspace, FynOps requests access only after showing the Google permissions requested and receiving your authorization. Depending on the Google services and sync settings you enable, FynOps may access and process:

• Gmail: message and thread identifiers, senders and recipients, subject lines, timestamps, labels, message content, and attachments needed to provide connected inbox, classification, search, evidence, task, and workflow features.
• Google Calendar: calendar identifiers, event titles and descriptions, organizers and attendees, dates and times, recurrence details, locations, conferencing links, and attachments needed to provide scheduling, meeting context, task, and workflow features.
• Google Drive: drive, folder, and file identifiers; names; metadata; permissions; and the content of files available under the access you grant, as needed to provide file organization, search, evidence, task, and workflow features.
• Google account information: basic account identifiers, email address, and authorization details needed to identify and maintain your connection.

FynOps normalizes connected Google Workspace data and may index it in a tenant-separated data graph so the Services can connect messages, meetings, files, companies, tasks, and authorized financial context. Automated processing may classify, extract, summarize, match, and retrieve this data to provide features that you or your organization enable. FynOps may send the minimum necessary content to contracted infrastructure or AI service providers solely to perform those requested features on our behalf.

We do not use Google Workspace data for advertising, sell it, use it to determine credit or lending eligibility, or use it to train or improve generalized artificial intelligence or machine-learning models. FynOps does not permit its service providers to use Google Workspace data for their own independent purposes.

How We Use Information

We use information to:

• provide, operate, synchronize, maintain, and improve the Services;
• authenticate users and enforce workspace, company, and role-based access controls;
• process connected data and perform features and workflows you authorize;
• create records, reports, recommendations, alerts, tasks, and audit trails;
• respond to support requests and communicate about accounts, security, and service changes;
• monitor reliability, diagnose errors, prevent fraud and abuse, and protect the Services;
• administer subscriptions and fulfill our contractual and legal obligations; and
• send marketing communications where permitted by law. You may opt out of marketing messages at any time; service and security messages are not marketing.

Where applicable law requires a legal basis, we process information as needed to perform our contract, pursue legitimate interests that are not overridden by your rights, comply with law, protect vital interests, or based on consent. You may withdraw consent where consent is the basis, without affecting prior lawful processing.

Google API Services User Data Policy and Limited Use

FynOps's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We limit our use of Google Workspace data to providing or improving prominent, user-facing features that are visible and relevant to the interface in which you authorized the data. We transfer that data only as necessary to provide those features, with your direction or consent, for security purposes, or to comply with applicable law.

FynOps Chrome Extension

The FynOps Chrome extension is an add-on to FynOps' connection to your accounting system. It works on supported QuickBooks Online pages: Client overview, Books review and the reconciliation history for capture, which fills FynOps Pricing from what those pages show, and the reconcile page for the reconciliation assistant, which matches the transactions listed there against the account's bank feed and payment processor records in FynOps. You can read how it works on the FynOps Chrome extension help page.

• What capture reads: the supported pages you choose: the visible text of their headings, section text, tables, labelled values, and date-range fields, along with the page's web address and title. When a table is split into pages, capture clicks through the table's pages to read every row, then returns the table to its first page. On the reconciliation history page, Capture also reads the account and report period chosen on the page.
• When capture reads: when you click Capture. While the extension's side panel is open on a supported page, a check in your browser reads the page's section headings to recognize a supported page and enable the Capture button.
• Reconciliation assistant: while its panel is open on the QuickBooks Online reconcile page, it reads the transactions listed there (date, type, reference, payee, memo, and amount), the account and the statement date, and sends them to FynOps when you click Match & Check. FynOps matches them against that account's bank feed and payment processor records in FynOps. When you ask it to, it ticks the reconcile checkboxes of the matched transactions on the open page, and you review them and finish the reconciliation in QuickBooks Online. Reconcile page transactions are used for the match and are not stored.
• Where it is sent: to FynOps over HTTPS, for the FynOps workspace and company you selected in the extension. FynOps uses it to derive a summary of the books, such as account counts, reconciled through dates, and transaction volume, that pre-fills a pricing quote.
• How long it is kept: the raw capture is kept for 30 days and then deleted automatically. The derived summary is kept until you delete the capture. A pricing quote you save keeps its answers and a record of where each answer came from.
• Deleting captures: you can delete a capture in FynOps at any time. Deleting it removes the capture and its derived summary from FynOps, and any raw capture still held is deleted with it or, at the latest, by the automatic 30-day deletion.
• Sign-in information: the extension sends your FynOps email address and password to FynOps to sign you in. It stores the resulting sign-in tokens in the browser's extension storage and clears them when you sign out.

The use of information received from the FynOps Chrome extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it to provide the extension's features described above, and we transfer it as necessary to provide them, for security purposes, or to comply with applicable law.

FynOps MCP Server

The FynOps MCP server lets you connect an AI client that you choose, such as Claude or ChatGPT, to data already imported into your FynOps workspace. You can read how it works on the FynOps MCP help page. Nothing is shared with an AI client until you sign in to FynOps and approve the connection.

• What you authorize: you sign in with your own FynOps account and approve a single read-only permission for one workspace that you can access. The connection cannot create, change, or delete data in FynOps or in a connected service.
• What the AI client can receive: in response to its requests, records that FynOps has already imported for the companies and connected services you are permitted to see, such as accounting records, totals that FynOps calculates, and contact details like name, company, email address, telephone number, source, and tags. FynOps does not make a live request to a connected service when it answers.
• What is never sent: connected-service credentials and tokens, notes, message bodies, conversations, and email recipients.
• Access checks: your workspace membership and permissions are checked on every request, so a change to your access takes effect on the next request.
• Sign-in tokens: the AI client receives an access token that expires after 15 minutes and a refresh token that expires after 30 days. It renews the access token for as long as the connection stays approved.
• What FynOps records: FynOps records in its audit trail that a tool was called. It does not copy the filters you used or the values returned. When contact detail fields are requested, it records only the field names and the number of results.
• Revoking access:you can disconnect at any time in FynOps under Settings, then MCP, or in your AI client. A workspace administrator can disconnect another person's connection. Disconnecting takes effect on the client's next request.

Information that an AI client receives is handled under that client's own terms and privacy practices, not this Privacy Policy. Connect only AI clients that you and your organization trust.

How We Disclose Information

We may disclose information in these limited circumstances:

• Service providers: vendors that provide hosting, storage, security, authentication, analytics, communications, payment processing, support, and AI processing on our behalf under contractual confidentiality, security, and use restrictions.
• Your organization and authorized users: workspace owners, administrators, members, clients, or collaborators according to the permissions and sharing choices configured in the Services.
• At your direction: connected services or third parties when you initiate or authorize a transfer, workflow, export, or other action.
• Legal, safety, and security: when we reasonably believe disclosure is required by law or valid legal process, or is necessary to protect rights, safety, security, and the integrity of the Services.
• Business transactions: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable confidentiality and Google user-data transfer requirements.

We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising.

Human Access to Google Workspace Data

FynOps personnel do not read Google Workspace data except when you give explicit consent for a specific support or troubleshooting purpose; when access is necessary to investigate security, abuse, or technical issues; when required by applicable law; or when the data has been aggregated and anonymized for internal operations so it cannot identify you. Access is restricted to authorized personnel and is logged or otherwise controlled according to our security procedures.

Data Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encryption in transit and at rest, encrypted storage of connection credentials, tenant and company access controls, least-privilege service identities, logging, monitoring, and procedures for responding to security events. No security method is perfect, and we cannot guarantee absolute security.

Retention, Disconnection, and Deletion

We retain information only for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of information, workspace configuration, contractual requirements, and legal obligations.

• Disconnecting or revoking a Google integration stops future authorized access after the connection is disabled, but previously imported data may remain until it is deleted under your workspace's retention settings or through a deletion request.
• Raw page captures from the FynOps Chrome extension are deleted automatically after 30 days, and their derived summaries are kept until you delete the capture, as described in FynOps Chrome Extension above.
• Disconnecting an AI client from the FynOps MCP server stops its access on its next request. It does not recall information the client has already received, which that client keeps under its own terms, as described in FynOps MCP Server above.
• Workspace owners and authorized administrators may request deletion of imported integration data or an account. You may also contact us using the details below.
• We delete or de-identify covered data from active systems after a verified deletion request, subject to limited legal, fraud-prevention, security, and contractual exceptions. Residual copies in protected backups expire under our backup-retention schedule and are not restored for ordinary business use.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember settings, protect accounts, operate the Services, and understand service performance. You can control cookies through your browser, but disabling required technologies may prevent parts of the Services from working.

Your Choices and Privacy Rights

You may update certain account information and integration settings in the Services. You may disconnect Google Workspace in FynOps or revoke FynOps access through your Google Account. You may also request access, correction, deletion, restriction, objection, or portability of personal information, where provided by applicable law.

We may need to verify your identity and authority before completing a request. If information is controlled by your organization, we may direct the request to that organization. We will not discriminate against you for exercising a privacy right. You may appeal a denied request where applicable law provides that right.

International Data Transfers

FynOps is based in the United States, and information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

Children

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy as our Services or legal obligations change. We will post the updated policy here, revise the “Last Updated” date, and provide additional notice when required by law or when changes are material.

Contact Us

To ask a privacy question or submit a privacy request, contact FynOps, Inc. using one of the following methods:

• Email: support@fynops.com
• Mail: 8403 Pines Blvd, Suite 1026, Pembroke Pines, FL 33024, United States

If you need this policy in an accessible format, contact us and we will work with you to provide it.