Privacy Policy

FintastIQ LLC (“we,” “us,” or “our”) is a Nevada limited liability company and strategic consulting firm specializing in pricing, marketing, sales, and product strategy for high-growth and private equity-backed companies.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use any website, platform, application, or service operated under the fintastiq.com domain and its subdomains (collectively, the “Services”). This includes, without limitation:

• www.fintastiq.com (corporate website)
• assess.fintastiq.com (self-serve capability assessment)
• diagnose.fintastiq.com (engagement-level commercial diagnostics)
• learn.fintastiq.com (FintastIQ Academy — online learning platform)
• seek.fintastiq.com (Signal Seek — competitive intelligence and market signal monitoring)
• All integrated software modules for pricing, sales, marketing, and product analytics

This policy applies to any current or future property hosted on fintastiq.com or its subdomains. If you do not agree with this policy, please do not access or use our Services.

1. Service Classifications

Our Services fall into four categories, each with different data collection characteristics:

Informational Properties: Our corporate website (www.fintastiq.com) provides information about FintastIQ and collects only website visitor data and newsletter signups.

Self-Serve Tools: assess.fintastiq.com and seek.fintastiq.com allow authenticated users to access diagnostic assessments and market intelligence. These collect account data, usage data, and tool-specific inputs.

Subscription Platforms: learn.fintastiq.com and our integrated software products require account creation and may involve paid subscriptions. These collect account data, payment data, usage data, and user-generated content.

Engagement-Level Tools: diagnose.fintastiq.com supports deeper commercial diagnostics conducted in connection with consulting engagements. These may process sensitive business data subject to additional confidentiality protections under the applicable engagement agreement.

2. Account Information and Authentication

Access to our platforms requires account creation through one of our supported authentication providers: Google Cloud Identity or Microsoft Entra ID. A single account provides unified access across all FintastIQ properties through single sign-on (SSO).

At login, we collect:

• First name and last name
• Email address
• User ID (assigned by the authentication provider)

3. Tiered Data Collection Matrix

The following matrix describes the categories of personal and business data collected across each service tier. Engagement-level data (diagnose.fintastiq.com) may include sensitive business information such as pricing structures, margin data, and competitive positioning. This data is subject to additional confidentiality protections under the applicable Statement of Work or engagement agreement, which governs in the event of any conflict with this policy.

4. Automatically Collected Information

4.1 Website Analytics. Our corporate website (www.fintastiq.com) uses analytics tools to collect anonymized visitor data including page views, traffic sources, and navigation patterns.

4.2 Platform Analytics. Our custom-built platforms may collect usage analytics for performance monitoring, product improvement, and user experience optimization. This data is processed internally and is not shared with third-party analytics providers unless specified in this policy.

4.3 Download Tracking. When you download frameworks, calculators, playbooks, or other resources through FintastIQ platforms, we record the download event, including the resource accessed, timestamp, and your user ID.

5. Cookies and Tracking Technologies

5.1 Cookies on www.fintastiq.com. Essential cookies are required for core website functionality, including session management and CSRF protection. Analytics cookies measure visitor behavior. You can manage these through your browser settings or the Google Analytics Opt-out Browser Add-on.

5.2 Cookies on FintastIQ Platforms. All FintastIQ platforms that require authentication set authentication session cookies (set by Google Cloud Identity or Microsoft Entra ID) and functional cookies for preferences and session state. We do not use advertising or retargeting pixels on any FintastIQ property.

6. How We Use Your Information

• Providing, maintaining, and improving our Services across all platforms
• Authenticating your identity and managing your unified account
• Processing payments and managing subscriptions through Stripe
• Delivering assessment results, diagnostic analyses, course content, and competitive intelligence
• Generating AI-assisted insights, scoring, content, and analysis
• Tracking resource downloads to personalize recommendations
• Delivering consulting services and fulfilling engagement obligations
• Sending newsletters, thought leadership content, and marketing communications
• Managing client relationships through HubSpot
• Complying with legal obligations and protecting our rights

7. How We Share Your Information

We do not sell your personal information. We share information with the following service providers:

• Authentication: Google Cloud Identity and Microsoft Entra ID
• Cloud infrastructure: Supabase (hosted on Vercel and Google Cloud Platform)
• Payment processing: Stripe
• Email and communications: Substack (newsletters), SendGrid (transactional email)
• CRM and marketing: HubSpot
• Analytics: Google Analytics (www.fintastiq.com only)
• AI processing: Anthropic
• Document storage: Microsoft SharePoint (raw client engagement data)

8. Third-Party Data and Market Intelligence

Our competitive intelligence platform (seek.fintastiq.com) aggregates and presents data from third-party sources. FintastIQ does not control the accuracy, completeness, or timeliness of third-party data sources. Your queries, alert configurations, and interaction patterns within Signal Seek are collected and associated with your user profile to provide personalized intelligence and improve the service.

9. Use of Artificial Intelligence

FintastIQ uses Anthropic AI products for back-end process automation across our Services, including assessment scoring, content generation, data analysis and insights generation, and internal workflow automation. Certain user data may be processed by Anthropic’s systems. We do not permit the use of personal data for training third-party AI models. We do not use AI to make fully automated decisions that produce legal or similarly significant effects on users without human review.

10. Anonymized and Aggregated Data

With your explicit opt-in consent, we may use anonymized and aggregated data for benchmarking, product improvement, and thought leadership purposes. This data is stripped of all personally identifiable information. You may manage your consent preferences through your account settings or by contacting legal@fintastiq.com.

11. Data Retention

• Active accounts: Data is retained for the duration of your account and active use
• Account deletion: Personal information is deleted within 30 days of a deletion request at legal@fintastiq.com
• Assessment and diagnostic data: Retained while your account is active and for 30 days following deletion
• Academy data: Course progress, completion records, and certificates are retained while your account is active
• Engagement data: Client data under Statements of Work is retained per the engagement agreement

12. Data Security

We implement commercially reasonable safeguards including encryption of data in transit via TLS/SSL, encryption of data at rest, access controls, regular security audits and penetration testing, an incident response plan, and confidentiality agreements for all employees and contractors. No method of transmission or storage is completely secure.

13. Your Rights and Choices

Account Access and Deletion: Access and update your account information through your platform settings. Request a copy of your personal data or request account deletion by emailing legal@fintastiq.com (completed within 30 days).

Marketing Communications: Opt out via the “unsubscribe” link in any marketing email, through Substack preferences, or by contacting us directly.

Cookie Preferences: Manage cookie settings through your browser. Disabling analytics cookies will not affect platform functionality.

Do Not Track: Our Services do not currently respond to “Do Not Track” browser signals.

14. State-Specific Privacy Rights

California Residents (CCPA/CPRA): California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.

Other U.S. State Laws: Residents of states with applicable privacy legislation (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights. Contact legal@fintastiq.com to exercise any applicable rights.

15. International Users

FintastIQ LLC is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your data on the basis of consent, contractual necessity, legitimate interests, or legal compliance. You may have additional rights under the GDPR.

16. Enterprise Data Processing

Enterprise clients may request a separate Data Processing Agreement (DPA) governing the processing of personal data in connection with consulting engagements or platform usage. To request a DPA, contact legal@fintastiq.com.

17. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. Contact legal@fintastiq.com if you believe a child’s information has been collected.

18. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those third parties.

19. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technologies, or legal requirements. Material changes will be communicated by updating the “Last Updated” date and, where appropriate, notifying you via email or platform notification.

20. Contact Us