Privacy Policy

FinZot is operated by FinZot LLC ("FinZot," "we," "us"). This policy covers our website, our web application, and the emails we send you in connection with the service.

FinZot is built for US taxpayers and models US federal and state tax law only. We market it in the United States, in English and US dollars, and don't direct it at people in other countries. The service can be reached from anywhere; if you use it from outside the United States, your information is transferred to, processed, and stored in the United States under this policy.

By using FinZot, you agree to this policy. If you don't agree with it, please don't use the service.

Your email. When you sign in, we tie your plan to the email address you use. You don't have to use a real or personal email address, and we don't use it to verify your identity.

What you enter. You build your plan by typing it in yourself — we don't pull anything in from outside accounts. That covers the figures your projections run on, like savings, contributions, and the targets you're working toward. If you enter a date of birth, it feeds the projection math only and isn't an identity check. Because we never link to your bank, brokerage, or retirement accounts, the only financial information we hold is whatever you choose to put in.

A billing reference. If you subscribe, we store an opaque billing ID from Stripe, our payment processor, so we can associate your subscription with your account.

Where you came from. If you sign up after arriving through one of our ads or partner links, we record which campaign or partner referred you and, for an ad, the ad network's reference for that click, so we can tell the network a sign-up happened and pay partners what they are owed. It is a single label on your account, not a browsing history, and it is never recorded before you sign up.

What we don't receive. Your name, billing address, and card number are entered on Stripe's checkout and are never sent to or stored by FinZot, so our own records don't contain them.

Usage in guest mode. If you use FinZot without an account, the app tells our servers which of its pages you open and whether each projection finished, so we can see whether guest mode is being used. These reports contain no part of your plan, no plan identifier, and nothing about you; the only thing linking one to another is a random number that changes every time the page loads.

Limited technical data. Like most online services, our servers automatically record basic technical information — such as IP address and device or browser details — to operate, secure, and troubleshoot the service.

To run the service — generating your projected results, calculations, and charts.

To sign you in — sending the one-time codes that give you access to your account.

To process payments — through Stripe, for subscriptions.

To communicate with you — for example, sign-in emails and important notices about the service.

To keep the service secure and working — monitoring for problems, preventing abuse, and maintaining the system.

To power optional AI features — only if you choose to turn them on (see Who we share it with).

We share your information only with the service providers we rely on to run FinZot, and only as much as each one needs:

Amazon Web Services — hosting and email, in data centers located in the United States.

Stripe — payment processing. Card entry happens entirely on Stripe's side; your card number never touches our systems.

Anthropic — only if you opt in to an AI feature. With the Claude connector we don't send your plan to Anthropic: you connect Claude from your own Claude account, and Claude asks our servers for the parts of your plan it needs. What it reads becomes part of your Claude conversation, governed by that account's terms and privacy settings — including your own choice there about whether conversations are used to train Anthropic's models.

If we run an AI feature ourselves, we send only what it needs, under our commercial terms with Anthropic, which do not permit your data to be used to train its models. Either way, the rest of FinZot — tax and cashflow calculations, charts, and the rest of your plan — runs without AI and never sends your data to any AI provider.

We don't share your data with anyone else. We never sell it, and we never share your planning data for advertising or marketing.

We may disclose information if we are required to by law or valid legal process, or where reasonably necessary to protect the rights, safety, or security of our users or the service.

FinZot uses a small number of cookies and similar technologies that are strictly necessary to run the service — for example, to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings, though blocking the necessary ones may stop parts of the service from working.

Some browsers can send a "Do Not Track" (DNT) signal. Because FinZot doesn't track you across other companies' websites and doesn't serve advertising, we don't change our behavior based on DNT signals — we collect only what's described in this policy, for everyone.

Connections use HTTPS with TLS, the data we store is encrypted at rest with AES-256, sign-in is passwordless, and the local copy of your plan kept by your browser is encrypted as well. FinZot runs on Amazon Web Services in US data centers.

For the full details of how we protect your data, see our Security page. No online service can be perfectly secure, but we review and update our protections regularly.

You can wipe your data at any time from within the app. Doing so permanently deletes your plans from our live systems — including every prior version we've stored — and removes the copy held locally in your browser. It also revokes any Claude connector grant and deletes the working copies it made; conversations in your own Claude account are yours to delete, from Claude.

Routine disaster-recovery backups aren't kept indefinitely: any residual copy ages out of our backup rotation within 60 days, after which it can no longer be restored.

We keep your information for as long as your account is active or as needed to provide the service. We may retain limited records where required for billing, tax, or legal purposes.

View and edit your plan. You can update your plan at any time inside the app.

Delete. You can permanently wipe your data from within the app, as described in Data retention & deletion.

Marketing. If we send any marketing emails, you can opt out of them at any time; we'll still send essential service messages, such as sign-in codes.

AI features. These are off by default. No part of your plan reaches an AI provider unless you connect one yourself, and you can disconnect the Claude connector at any time from Settings → Claude, or by removing it in Claude.

FinZot is built for adults planning their finances and isn't directed to anyone under 13. We don't ask for a child's information and have no reason to collect it. If you're a parent or guardian and believe your child created an account or entered information, email privacy@finzot.com and we'll remove it.

Privacy practices evolve, and this policy may change with them. When something material changes, we'll post the update here and, where appropriate, email you. The date at the top always reflects the current version, and using FinZot after a change means the updated policy applies to you.

Questions about this policy or your data? Email us at privacy@finzot.com.