Privacy Policy
How Finis Code collects, uses, and protects your data across the desktop app, cloud platform, and AI assistant.
Last updated: July 31, 2026
This Privacy Policy explains how Finis Code ("Finis Code", "we", "us") collects, uses, and protects information when you use our desktop application, cloud platform, and companion mobile apps (collectively, the "Service").
1. Information We Collect
Account information: name, email address, and authentication identifiers when you sign up, including via Google Sign-In or Apple Sign-In.
Organization data: the business records you create in the Service - accounts, invoices, inventory, HR records, and similar ERP data. In cloud mode this data is stored in a database isolated per organization; in local mode it stays on your device in a local SQLite database.
Usage data: device type, log data, and diagnostic information used to keep the Service reliable and secure.
AI assistant content: messages, voice recordings, and files (PDF/Word/Excel/images) you send to the Finis AI assistant, processed in order to generate a response.
2. How We Use Information
- To provide, operate, and maintain the Service, including the AI assistant and its ERP tools.
- To authenticate you and keep your organization's data isolated from other organizations.
- To process payments and manage your subscription plan, including managed AI usage credits.
- To provide customer support through the in-app support ticket system.
- To detect, prevent, and respond to security incidents, fraud, and abuse.
3. AI Processing and Third-Party Services
When you use Finis AI, your prompts and the relevant context (such as the record you have open) are sent to a large language model provider to generate a response. By default this is Google's Gemini API under our managed plan; if you configure your own API key (Bring Your Own Key), your requests are sent directly using your own account instead. We do not use your organization's data to train our own models.
We use the following third-party services, each governed by its own privacy policy: Google (Sign-In and Gemini API), Apple (Sign-In), and payment processors for subscription billing.
4. Data Storage and Security
Cloud data is stored in a database dedicated to your organization; no other organization can query or access it. Sensitive values such as API keys and database credentials are stored encrypted. Sessions use signed, time-limited tickets, and repeated failed login attempts are automatically rate-limited. Uploaded files are validated by type and size and served only through authenticated endpoints.
5. Data Retention
We retain your organization's data for as long as your account is active. Audit log entries (who changed what, and when) are retained for accountability and are not deleted when an individual record is edited. You may request deletion of your account and data at any time - see our Data Deletion Instructions.
6. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details below or submit a request through the in-app support system.
7. Children's Privacy
The Service is intended for business use and is not directed at children under 16. We do not knowingly collect personal information from children.
8. International Users
Finis Code is used by organizations in multiple countries. By using the Service, you consent to your information being processed in the country where your chosen deployment (local or cloud) stores data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and material changes will be highlighted in the Service.
10. Contact Us
If you have questions about this Privacy Policy, contact us at info@finis.com.tr.