This Privacy Policy explains how FynOps, Inc. (“FynOps,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you visit fynops.com, use the FynOps application, or use related products, support, and services (collectively, the “Services”).

FynOps provides financial operations software to businesses and their authorized users. A customer organization controls the workspaces it creates, the people it authorizes, and the third-party services it connects. If you use FynOps through an organization, that organization may control your account and the business data processed in its workspace.

Information We Collect

We collect information in the following categories:

• Account and profile information: name, business email address, telephone number, job title, login identifiers, organization, workspace membership, roles, and preferences.
• Business and financial information: company records, charts of accounts, transactions, invoices, payments, reports, operational records, and other content submitted to or generated through the Services.
• Connected-service data: information retrieved from services you authorize, such as accounting, banking, commerce, file-storage, email, and calendar providers. The information available depends on the provider, permissions you grant, and configuration you choose.
• Files and communications: files, messages, support requests, feedback, and other content you upload or send to us.
• Billing information: subscription, invoice, and transaction details. Payment card information may be collected directly by our payment processor rather than stored by FynOps.
• Device, usage, and security information: IP address, browser and device type, operating system, pages and features used, timestamps, diagnostic events, audit activity, authentication events, and information needed to prevent abuse and keep the Services secure.

We collect information from you, your organization, users you authorize, connected services, and automatically through your use of the Services. We do not intentionally collect sensitive personal information that is unrelated to providing business financial operations services.

Google Workspace Data

If you choose to connect Google Workspace, FynOps requests access only after showing the Google permissions requested and receiving your authorization. Depending on the Google services and sync settings you enable, FynOps may access and process:

• Gmail: message and thread identifiers, senders and recipients, subject lines, timestamps, labels, message content, and attachments needed to provide connected inbox, classification, search, evidence, task, and workflow features.
• Google Calendar: calendar identifiers, event titles and descriptions, organizers and attendees, dates and times, recurrence details, locations, conferencing links, and attachments needed to provide scheduling, meeting context, task, and workflow features.
• Google Drive: drive, folder, and file identifiers; names; metadata; permissions; and the content of files available under the access you grant, as needed to provide file organization, search, evidence, task, and workflow features.
• Google account information: basic account identifiers, email address, and authorization details needed to identify and maintain your connection.

FynOps normalizes connected Google Workspace data and may index it in a tenant-separated data graph so the Services can connect messages, meetings, files, companies, tasks, and authorized financial context. Automated processing may classify, extract, summarize, match, and retrieve this data to provide features that you or your organization enable. FynOps may send the minimum necessary content to contracted infrastructure or AI service providers solely to perform those requested features on our behalf.

We do not use Google Workspace data for advertising, sell it, use it to determine credit or lending eligibility, or use it to train or improve generalized artificial intelligence or machine-learning models. FynOps does not permit its service providers to use Google Workspace data for their own independent purposes.

How We Use Information

We use information to:

• provide, operate, synchronize, maintain, and improve the Services;
• authenticate users and enforce workspace, company, and role-based access controls;
• process connected data and perform features and workflows you authorize;
• create records, reports, recommendations, alerts, tasks, and audit trails;
• respond to support requests and communicate about accounts, security, and service changes;
• monitor reliability, diagnose errors, prevent fraud and abuse, and protect the Services;
• administer subscriptions and fulfill our contractual and legal obligations; and
• send marketing communications where permitted by law. You may opt out of marketing messages at any time; service and security messages are not marketing.

Where applicable law requires a legal basis, we process information as needed to perform our contract, pursue legitimate interests that are not overridden by your rights, comply with law, protect vital interests, or based on consent. You may withdraw consent where consent is the basis, without affecting prior lawful processing.

Google API Services User Data Policy and Limited Use

FynOps's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We limit our use of Google Workspace data to providing or improving prominent, user-facing features that are visible and relevant to the interface in which you authorized the data. We transfer that data only as necessary to provide those features, with your direction or consent, for security purposes, or to comply with applicable law.

How We Disclose Information

We may disclose information in these limited circumstances:

• Service providers: vendors that provide hosting, storage, security, authentication, analytics, communications, payment processing, support, and AI processing on our behalf under contractual confidentiality, security, and use restrictions.
• Your organization and authorized users: workspace owners, administrators, members, clients, or collaborators according to the permissions and sharing choices configured in the Services.
• At your direction: connected services or third parties when you initiate or authorize a transfer, workflow, export, or other action.
• Legal, safety, and security: when we reasonably believe disclosure is required by law or valid legal process, or is necessary to protect rights, safety, security, and the integrity of the Services.
• Business transactions: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable confidentiality and Google user-data transfer requirements.

We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising.

Human Access to Google Workspace Data

FynOps personnel do not read Google Workspace data except when you give explicit consent for a specific support or troubleshooting purpose; when access is necessary to investigate security, abuse, or technical issues; when required by applicable law; or when the data has been aggregated and anonymized for internal operations so it cannot identify you. Access is restricted to authorized personnel and is logged or otherwise controlled according to our security procedures.

Data Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encryption in transit and at rest, encrypted storage of connection credentials, tenant and company access controls, least-privilege service identities, logging, monitoring, and procedures for responding to security events. No security method is perfect, and we cannot guarantee absolute security.

Retention, Disconnection, and Deletion

We retain information only for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of information, workspace configuration, contractual requirements, and legal obligations.

• Disconnecting or revoking a Google integration stops future authorized access after the connection is disabled, but previously imported data may remain until it is deleted under your workspace's retention settings or through a deletion request.
• Workspace owners and authorized administrators may request deletion of imported integration data or an account. You may also contact us using the details below.
• We delete or de-identify covered data from active systems after a verified deletion request, subject to limited legal, fraud-prevention, security, and contractual exceptions. Residual copies in protected backups expire under our backup-retention schedule and are not restored for ordinary business use.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember settings, protect accounts, operate the Services, and understand service performance. You can control cookies through your browser, but disabling required technologies may prevent parts of the Services from working.

Your Choices and Privacy Rights

You may update certain account information and integration settings in the Services. You may disconnect Google Workspace in FynOps or revoke FynOps access through your Google Account. You may also request access, correction, deletion, restriction, objection, or portability of personal information, where provided by applicable law.

We may need to verify your identity and authority before completing a request. If information is controlled by your organization, we may direct the request to that organization. We will not discriminate against you for exercising a privacy right. You may appeal a denied request where applicable law provides that right.

International Data Transfers

FynOps is based in the United States, and information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

Children

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy as our Services or legal obligations change. We will post the updated policy here, revise the “Last Updated” date, and provide additional notice when required by law or when changes are material.

Contact Us

To ask a privacy question or submit a privacy request, contact FynOps, Inc. using one of the following methods:

• Email: walt@fynops.com
• Telephone: 1-888-250-5601
• Mail: 8403 Pines Blvd, Suite 1026, Pembroke Pines, FL 33024, United States

If you need this policy in an accessible format, contact us and we will work with you to provide it.