Draft v1 · not legal advice
Privacy policy
Last updated October 14, 2026
This is a working draft for a pre-launch app. It is not legal advice and is not a substitute for counsel. It will be reviewed before Fineants opens sign-up.
Who operates Fineants
Fineants (fineants.io) is operated by James Almeida (GSV). It is pre-launch. There is no public sign-up. Access is limited to approved Google accounts while sign-in is in testing. You can join a waitlist. Joining does not grant access.
What we collect
- Waitlist. If you join the waitlist, we store the email address you submit, when you submitted it, and an optional page reference. We may also store a hash of the IP address and user agent to limit abuse. We use this only to tell you when sign-up opens. Joining does not create an account, and we do not send a confirmation message.
- Your sign-in. You sign in with Google. We store the email address, name, and profile image URL that Google returns, plus session records.
- Connected accounts. When you connect an institution through Plaid Link, Fineants requests read-only products. It stores Plaid identifiers, an encrypted access token, account details (names, types, last four digits), balances, transactions, holdings, liabilities, recurring streams, account-owner identity details where the institution provides them, and statement metadata.
- What you enter or upload. This includes manual accounts, card terms and rewards, loans, vehicles and other assets, credit scores you type in, notes, payers, crypto activity and cost-basis lots, and the transactions and balances you confirm from a statement upload. Vehicle lease PDFs you upload are stored.
- API keys and connected agents. For API keys we store a hash of each key, its name, its scopes, and when it was created and last used. We never store the key itself.
- Advice chats. If you use Advice, your conversation threads are stored.
- Web logs. Our host may record ordinary request logs (pages visited, IP address, user agent). Public pages do not show financial data.
- Web Analytics. Public pages use Vercel Web Analytics, which is cookieless. It counts page views. When you join the waitlist it also counts that action. That event does not include your email address or any other personal data.
Where data lives
Application data is stored in Convex, a hosted database. The app is hosted on Vercel. Every data row is tied to the user who owns it, and the backend checks the caller on every read and write. A signed-in user, API key, or OAuth token can only reach that user’s own data.
Plaid access tokens are encrypted before they are stored, are decrypted only on our server, and are never sent to your browser or returned to agents. No security measure is perfect, and we cannot guarantee that data will never be accessed without authorization.
How we use data
We use data to run Fineants for you: to show your accounts, keep your books, power bills, recurring, and other views, and answer the agents and MCP keys you authorize. Fineants does not move money, start transfers, or write to your bank.
Your controls
You can disconnect an institution at any time. That removes the connection at Plaid and deletes its accounts from Fineants. You can revoke API keys in Settings. Other data is kept while your account exists. There is not yet a self-serve way to delete or export your whole account. To ask for deletion or a copy of your data, contact the operator. See also the data retention note.
Changes
This policy will change as Fineants gets closer to launch. The date at the top shows the latest version.
Contact
James Almeida, operator of Fineants — https://fineants.io.