Privacy & Security Policy
Last updated: February 23, 2026
Account Information
When you create an account, we collect your name, email address, and company information.
Financial Data
We collect and process financial data you upload or connect through integrations (QuickBooks, Google Sheets) to provide our CFO dashboard and analytics services.
Usage Information
We automatically collect information about how you use Fyfe, including pages visited, features used, and interaction patterns to improve our service.
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your financial data is stored securely in enterprise-grade databases.
Access Controls
We implement strict role-based access controls. Only authorized personnel with legitimate business needs can access your data, and all access is logged and monitored.
Infrastructure Security
Our infrastructure is hosted on secure cloud platforms with SOC 2 compliance, regular security audits, and 24/7 monitoring for threats.
Data Backup
We perform automated daily backups of all data with multiple redundancy layers to ensure data integrity and availability.
- To provide and maintain our financial analytics services
- To generate AI-powered insights and recommendations
- To communicate with you about your account and service updates
- To improve and optimize our platform
- To detect and prevent fraud or security issues
- To comply with legal obligations
We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting support.
Upon account deletion, we will permanently remove your financial data within 30 days, except where retention is required by law.
QuickBooks Integration
When you connect QuickBooks, we access only the financial data necessary to provide our services. We do not store your QuickBooks login credentials.
Google Sheets Integration
Our Google Sheets integration uses OAuth authentication and only accesses spreadsheets you explicitly authorize.
AI Services
We use third-party AI services to generate insights. Your identifiable financial data is processed securely under strict contractual data processing agreements and is never used to train any AI model — by Fyfe Finance or any third-party AI provider we engage.
Fyfe Finance maintains a strict policy against using identifiable Customer Data or financial inputs to train foundation models or any third-party AI services (including but not limited to large language models, machine learning models, or generative AI services).
Any internal fine-tuning or model improvement performed by Fyfe Finance uses only de-identified, aggregated metadata — never your raw financial figures, business names, or account-specific inputs.
We maintain a clear distinction between:
- Service Processing: Using your data to generate your personalized insights and dashboard — this is the core purpose of the platform.
- Model Training: Using data to improve AI systems for any party's benefit. We do not do this with your data.
As required by California (CPRA) and Colorado (CPA) law, we disclose the following about automated processing on our platform:
How Our AI Works
Fyfe uses algorithms to analyze the financial data you provide and generate outputs including: identification of financial anomalies, cash flow predictions, runway scenarios, and strategic recommendations. These outputs are calculated from the figures you enter — they are informational tools to assist your decision-making, not autonomous decisions made on your behalf.
Your Rights Regarding Automated Processing
- You have the right to request an explanation of the logic behind any AI-generated prediction or recommendation on your account.
- You have the right to appeal or contest any automated decision that meaningfully impacts your account status (e.g., access restrictions based on anomaly flags).
- You may opt out of automated profiling used for any purpose other than delivering the core Fyfe Finance service by contacting privacy@fyfefinance.com.
To submit a request for AI logic explanation or to appeal an automated decision, contact us at privacy@fyfefinance.com with the subject line "ADMT Request."
Under California law (CPRA, effective 2026), financial account credentials and AI-processed financial data are classified as Sensitive Personal Information (SPI). Fyfe Finance collects and processes this data solely to provide the services you have requested.
Right to Limit Use of Sensitive Personal Information
You may direct us to limit the use of your financial credentials and data to the primary purpose of providing the Fyfe Finance dashboard. We do not use this sensitive data for secondary purposes such as independent marketing, cross-context behavioral advertising, or profiling unrelated to delivering your financial insights.
How to Exercise This Right
To formally limit the use of your Sensitive Personal Information, contact us at privacy@fyfefinance.com with the subject line "Limit SPI Use." We will confirm your request within 10 business days.
We honor Global Privacy Control (GPC) signals sent from your browser, as required under California (CPRA), Connecticut (CTDPA), and Colorado (CPA) law.
When a valid GPC signal is detected from your browser, we will automatically opt you out of any non-essential data sharing — including analytics data sharing with third parties — and display a visible "Opt-Out Request Honored" confirmation.
This opt-out applies to any sharing of your personal information for purposes beyond the core delivery of the Fyfe Finance service. It does not affect our ability to process your data as necessary to provide the service you have subscribed to.
You have the right to:
- Access any personal information collected about you since January 1, 2022, regardless of whether it was collected in the last 12 months. As of January 1, 2026, California law no longer limits data access requests to a 12-month lookback period.
- Correct inaccurate or incomplete data
- Request deletion of your data
- Export your data in a portable format
- Opt-out of marketing communications
- Limit the use of your Sensitive Personal Information (see above)
- Opt out of automated profiling unrelated to your core service
- Lodge a complaint with a data protection authority
To exercise any of these rights, contact privacy@fyfefinance.com. We will respond within 45 days as required by applicable law.
Contact Us
If you have questions about this Privacy & Security Policy or how we handle your data, please contact us at privacy@fyfefinance.com
Changes to This Policy
We may update this Privacy & Security Policy from time to time. We will notify you of any material changes by email or through a prominent notice in the application.