Privacy Policy

FintastIQ LLC (“we,” “us,” or “our”) is a Nevada limited liability company and strategic consulting firm specializing in pricing, marketing, sales, and product strategy for high-growth and private equity-backed companies.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use any website, platform, application, or service operated under the fintastiq.com domain and its subdomains (collectively, the “Services”). It covers:

• fintastiq.com and www.fintastiq.com (corporate website)
• talent.fintastiq.com (FintastIQ Talent network for growth advisors and clients)
• assess.fintastiq.com (free commercial capability assessment)
• diagnose.fintastiq.com (Rapid Diagnostic, engagement-level commercial diagnostics)
• learn.fintastiq.com, also reachable at academy.fintastiq.com (FintastIQ Academy online learning)
• seek.fintastiq.com, also reachable at signal.fintastiq.com (Signal Seek commercial due diligence and market intelligence)
• price.fintastiq.com (PriceShield pricing command center)
• research.fintastiq.com (ResearchIQ survey and conjoint research, including the survey pages research participants use)
• The dev- and staging- test versions of these sites

This policy also applies to any future property on fintastiq.com or its subdomains. connect.fintastiq.com is an internal staff tool operated by Zoho and isn’t part of the Services. If you don’t agree with this policy, please don’t access or use our Services.

1. Service Classifications

Our Services fall into five categories, each with different data collection characteristics:

Corporate Website: fintastiq.com collects what you choose to send us through its forms (contact, newsletter, privacy requests, and consultation booking) and website usage data.

Free Tools Without an Account: assess.fintastiq.com lets you take an assessment without signing in. To receive your full report, you give us your contact and company details.

Account-Based Platforms: talent.fintastiq.com, learn.fintastiq.com, seek.fintastiq.com, price.fintastiq.com, research.fintastiq.com, and diagnose.fintastiq.com require a FintastIQ account. They collect account data, usage data, and the content you create or upload.

Client Business Data: diagnose.fintastiq.com, seek.fintastiq.com, and price.fintastiq.com process business data that you or your organization provide, such as financial records, customer and product lists, pricing, and deal documents. This data is also governed by the applicable engagement agreement or subscription.

Research Participation: the survey pages on research.fintastiq.com collect answers from participants invited by our clients or recruited through panel partners (see Section 8.3).

2. Account Information and Authentication

You sign in to our platforms with your Google account or a one-time sign-in link sent to your email. FintastIQ staff sign in with Microsoft. A single account provides unified access across all FintastIQ properties through single sign-on (SSO).

At sign-in, we collect:

• First name and last name
• Email address
• Profile photo, if your Google account provides one
• User ID

You can add optional profile details, such as your company, role, photo, and a mobile number for text alerts.

3. Data Collection by Service

The table below lists the personal and business data each service collects. Data you provide through diagnose.fintastiq.com, seek.fintastiq.com, or price.fintastiq.com may include sensitive business information such as pricing, margins, and customer lists. It is also subject to the confidentiality terms of the applicable Statement of Work or engagement agreement, which governs if it conflicts with this policy.

4. Automatically Collected Information

4.1 Analytics. Our websites and apps use Google Analytics to understand how they are used. Analytics cookies are set only after you accept them in our cookie banner. Until then, Google Analytics runs in a restricted mode that sets no cookies or identifiers, though Google still receives basic request information such as your IP address and the page you visited.

4.2 Server Logs. Our hosting provider records technical request information, such as IP address, browser type, and pages requested, for security and troubleshooting.

4.3 Download Tracking. When you download frameworks, calculators, playbooks, or other resources through FintastIQ platforms, we record the download event, including the resource accessed, timestamp, and your user ID.

5. Cookies and Tracking Technologies

5.1 Our Cookies. Essential cookies set by FintastIQ keep you signed in across fintastiq.com and its subdomains and protect sign-in from forgery. Preference cookies remember choices such as your light or dark theme and your cookie choice. Analytics cookies are set only after you accept them. You can change your choice at any time with the Cookie Settings link in the site footer. See our Cookie Policy for the full list.

5.2 Third-Party Cookies. Calendly sets its own cookies when you open a booking scheduler, and Cloudflare’s video player may set cookies when you watch Academy videos. We don’t use advertising or retargeting pixels on any FintastIQ property.

6. How We Use Your Information

• Providing, maintaining, and improving our Services across all platforms
• Authenticating your identity and managing your unified account
• Processing payments and managing subscriptions through Stripe
• Delivering assessment results, diagnostic analyses, course content, due diligence analysis, pricing guidance, and research results
• Generating AI-assisted analysis, summaries, and drafts (see Section 9)
• Reviewing and matching Talent network applications and projects
• Tracking resource downloads to personalize recommendations
• Delivering consulting services and fulfilling engagement obligations
• Sending newsletters, thought leadership content, and marketing communications you sign up for
• Sending account notifications, and text alerts you opt into
• Running surveys and research studies for our clients
• Managing client relationships and business operations through Zoho
• Complying with legal obligations and protecting our rights

7. How We Share Your Information

We don’t sell your personal information. We share it with the following service providers (subprocessors), only as needed to run the Services:

We also use tools that process only our own content, not your personal information, such as HeyGen (AI video production), CloudConvert (document conversion), and GitHub (website content management). Integrations you choose to connect, survey panel partners, and public data sources are described in Section 8.

We will provide at least thirty (30) days’ notice via email before adding a new category of service provider to this list. An updated list of subprocessors is maintained on this page.

8. Third-Party Data, Integrations, and Research

8.1 Signal Seek Data Sources. Signal Seek gathers public information about the companies you research. Sources include SEC EDGAR, UK Companies House, the USPTO, court records (CourtListener), government data such as USAspending, the Bureau of Labor Statistics, and the Census Bureau, news sources such as GDELT and NewsAPI, the Internet Archive, Wikipedia, and public job boards. When enabled, it also uses providers such as Semrush, DataForSEO, Apollo, Crunchbase, Adzuna, AdClarity, X, Reddit, YouTube, Google Trends, the Meta Ad Library, Yelp, Google Places, and app store reviews. These sources receive the names and web addresses of the companies being researched, not your personal information. Some return content written by or about individuals, such as public reviews, social media posts, and court filings. We store that content with the research project, may analyze it with AI (see Section 9), and use it only to assess the company involved. Signal Seek also visits researched companies’ public websites, and our crawler identifies itself as FintastIQ. FintastIQ doesn’t control the accuracy, completeness, or timeliness of third-party data. Your queries, alert settings, and activity in Signal Seek are associated with your account to provide the service.

8.2 Systems You Connect. At your direction, diagnose.fintastiq.com and price.fintastiq.com can import data from QuickBooks Online, Zoho Books, and Zoho CRM, and diagnose.fintastiq.com can import files from your own cloud storage (Amazon S3, Azure, or Google Cloud Storage) or SFTP server. PriceShield can also send pricing guidance to QuickBooks Online and Zoho CRM, and to Slack, Microsoft Teams, email addresses, or webhooks you configure. These providers handle data under your own agreements with them. Disconnecting a system stops new transfers; data already imported stays in your project until you delete the project or ask us to delete it.

8.3 Research Participants. If you take a survey on research.fintastiq.com, we collect your answers and the technical details needed to run the study, such as the participant ID assigned by the panel that invited you. You may have been invited by one of our clients or recruited through a panel partner such as Prolific or Cint, each of which has its own privacy policy. Panel partners receive only a participant ID and whether you completed the survey, not your answers. Our client for the study sees the results. Open-ended answers may be analyzed with AI (see Section 9). To ask us to delete your answers, use our privacy request form.

9. Use of Artificial Intelligence

We use Anthropic’s Claude models to power certain features. What we send depends on the service:

• Talent network: application and project submissions, including contact details, experience, rates, and project descriptions, to summarize, screen, and suggest matches. The AI only recommends. A person makes every decision to accept or decline an applicant.
• Rapid Diagnostic: summaries and samples of your business data, such as metrics, customer and product identifiers, and opportunity estimates, to write narratives and analysis; and company names for web research.
• Signal Seek: content from documents you upload or link, such as management presentations, contracts, call transcripts, and CRM notes, plus target and competitor names, to produce due diligence analysis; and company names for web research.
• PriceShield: column headers and sample values from files you upload, and pricing recommendations that can include your customers’ names, to map data and draft rationale and communications.
• ResearchIQ: interview transcripts and open-ended survey answers, when AI features are turned on for a study, to code responses and draft findings.

We don’t use AI to score the Capability Assessment, and the FintastIQ Academy doesn’t send your data to AI providers. Anthropic processes this data on our behalf under its commercial terms, which don’t permit it to train its models on our data. We don’t permit the use of personal data for training third-party AI models. We don’t use AI to make fully automated decisions that produce legal or similarly significant effects on you.

10. Anonymized and Aggregated Data

We may combine data processed through our Services into aggregated statistics, such as percentiles, averages, and benchmark ranges, and use them to improve our benchmarks and Services. We keep only statistics pooled from at least five organizations that contain no names, identifiers, or free text, so they can’t identify you, your organization, your customers, or any individual, and we keep them after your other data is deleted. We won’t publish or share your own data, or any statistic built from fewer than five organizations, without your written consent.

We may describe our work in anonymized case studies that don’t name you or your organization or include details that could identify either. Naming you or your organization requires your written consent and remains subject to any confidentiality or non-disclosure agreement between us.

This section takes effect on October 23, 2026. Until then, we use aggregated data only with your opt-in consent.

11. Data Retention

• Active accounts: Data is retained for the duration of your account and active use
• Inactive accounts: Accounts with no login activity for twenty-four (24) consecutive months are flagged for review and the account holder is notified by email before any action is taken. Signing in clears the flag
• Account deletion: Personal information is deleted from every FintastIQ service within 30 days of a verified deletion request made through our privacy request form or to legal@fintastiq.com, and within 30 days of an account being deleted
• Assessment and diagnostic data: Retained while your account is active and for 30 days following account deletion
• Academy data: Course progress, completion records, and certificates are retained while your account is active. Completion certificates may be verified for up to two (2) years after account deletion
• Engagement data: Client data under Statements of Work is retained per the engagement agreement, and in the absence of specific terms, for no longer than two (2) years after engagement completion
• Records we must keep by law: Invoices, signed contracts, and tax records are kept for as long as the law requires, with other personal details removed
• Backup and audit data: Database backups are kept for up to 35 days. Audit and security logs are kept for up to two (2) years; when we delete your data, your name and email are removed from the logs we keep

12. Data Security

We implement commercially reasonable safeguards including encryption of data in transit via TLS/SSL, encryption of data at rest, access controls, regular security audits and penetration testing, an incident response plan, and confidentiality agreements for all employees and contractors. No method of transmission or storage is completely secure.

12.1 Breach Notification. We will notify affected users via email without undue delay and no later than 72 hours after becoming aware of a breach involving personal data. Notification will include a description of the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.

12.2 Vulnerability Disclosure. If you believe you have discovered a security vulnerability in any FintastIQ service, please report it responsibly by emailing security@fintastiq.com. We ask that you not publicly disclose the issue until we have had a reasonable opportunity to address it.

13. Your Rights and Choices

Account Access, Correction, and Deletion: Access and update your account information through your platform settings. You may request a copy of your personal data in a commonly used, machine-readable format, request correction of inaccurate information, or request account deletion using our privacy request form or by emailing legal@fintastiq.com.

How We Handle Privacy Requests: All privacy-related requests submitted to legal@fintastiq.com will be acknowledged within five (5) business days. We aim to resolve requests within thirty (30) days. If additional time is required, we will notify you of the delay and the reason. If you are unsatisfied with our response, you may contact us again at legal@fintastiq.com with “Privacy Escalation” in the subject line for further review.

Marketing and Notification Emails: Opt out via the “unsubscribe” link in any marketing or notification email or by contacting us directly. Sign-in links and other emails you request directly aren't affected.

Text Messages: If you opt in to FintastIQ Talent text alerts, we use your mobile number only to send those alerts. We don’t sell, rent, or share mobile numbers or text-message consent with third parties or affiliates for their marketing; the number is shared only with the provider that delivers our messages. Reply STOP to any message to opt out, or uncheck the box on your profile. See our Text Alert Terms.

Cookie Preferences: Accept or reject analytics cookies in our cookie banner, and change your choice at any time with the Cookie Settings link in the site footer. Rejecting analytics cookies won't affect platform functionality. See our Cookie Policy.

Do Not Track: Our Services don't currently respond to “Do Not Track” browser signals.

14. State-Specific Privacy Rights

California Residents (CCPA/CPRA): California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We don't sell or share personal information as defined under the CCPA/CPRA.

Other U.S. State Laws: Residents of states with applicable privacy legislation (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights. Contact legal@fintastiq.com to exercise any applicable rights.

15. International Users

FintastIQ LLC is based in the United States. Our primary infrastructure is hosted in AWS US-East-1 (Northern Virginia). Some service providers listed in Section 7, and connected systems such as Zoho, may process data in other locations. Certain operational support is provided by team members located in India. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or India.

If you're in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Contractual necessity: Account creation, authentication, payment processing, and service delivery
• Legitimate interests: Platform analytics, security monitoring, and product improvement
• Consent: Marketing communications, anonymized data usage for benchmarking, and optional analytics cookies
• Legal compliance: Retention of records required by applicable law

You may have additional rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

16. Enterprise Data Processing

Enterprise clients may request a separate Data Processing Agreement (DPA) governing the processing of personal data in connection with consulting engagements or platform usage. To request a DPA, contact legal@fintastiq.com.

17. Children’s Privacy

Our Services aren't directed to individuals under the age of 16. We don't knowingly collect personal information from children. Contact legal@fintastiq.com if you believe a child’s information has been collected.

18. Third-Party Links

Our Services may contain links to third-party websites. We aren't responsible for the privacy practices of those third parties.

19. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technologies, or legal requirements. Material changes will be communicated by updating the “Last Updated” date and, where appropriate, notifying you via email or platform notification.

20. Contact Us