Privacy policy

This policy explains how Finsplore Pty Ltd (ACN 703 770 496), which operates Finsplore ("Finsplore", "we", "us"), handles personal information. It covers our website (finsplore.io), the Finsplore web and mobile apps, our early-access waitlist, and any emails or support conversations with us.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The short version#

• We collect what you give us (your email for the waitlist; your account details; the statements you import and the assets you add) and some technical information about how you use the site and apps.
• We use it to run Finsplore for you, keep it secure, and improve it. We do not sell your personal information and we do not use it for advertising by other companies.
• During early access, Finsplore does not connect to your bank. Your financial information gets into Finsplore only when you import a statement or enter an account yourself.
• Your financial data is stored in our database. Some service providers outside Australia also process parts of it, including the AI models behind Ask Finsplore and categorisation (United States); section 7 lists them all.
• You can see, correct or delete your information, and download a copy of part of it (section 12). Email support@finsplore.io.

1. Who this policy covers#

This policy applies to everyone whose personal information we handle: website visitors, people who join the waitlist or contact us, early-access users, and anyone a user mentions in information they add (for example, a payee name in an imported statement).

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not.

2. What we collect#

If you visit our website

• Technical information: browser and device type, operating system, pages viewed, referring site, approximate location derived from your IP address, and the time of your visit. See section 9.

If you join the early-access waitlist

• Your email address and, if you give it, your first name.
• The page you signed up on and any campaign tags in the link you followed (for example, which newsletter or post sent you).

If you contact us

• Your name, email address, the content of your message, and our replies.

If you create a Finsplore account

• Account details: name, email address, Australian mobile number (asked for when you set up your profile), optional profile photo; your sign-in method (email and password, or Google or Apple sign-in); security settings and the devices you sign in from.
• Financial information you add: account names and types, balances, transactions (dates, amounts, descriptions, merchants), categories, budgets, goals, assets, liabilities, and the plans and scenarios you build. During early access this comes only from statement files you import (CSV, OFX, QFX, QIF, camt.053, MT940 and PDF files) and assets or transactions you add by hand.
• Information you give our AI assistant (Ask Finsplore): your questions and its answers.
• Support conversations and feedback you send us.
• Invite or referral codes you used to join.

Automatically, when you use the apps

• Usage and diagnostic information: features used, screens viewed, app version, crash reports and error logs, device identifiers, and IP address.

We do not ask for, and you should not give us, your bank login details, your tax file number, or full card numbers.

You can visit the website without giving us your name. You can use a pseudonym in the app where practical, but we need a working email address to run your account.

3. Sensitive information#

Bank statements can reveal sensitive information about you or other people, such as health providers you pay, donations to religious or political organisations, or union fees. The Privacy Act gives this kind of information extra protection.

We collect it only because it appears in data you choose to import, and only with your consent, which we ask for before your first import. We use it only to show you your own finances. We do not use it to profile you, we do not use it for marketing, and we do not disclose it to anyone except the service providers who store and process it for us under section 7. You can delete any transaction, or your whole account, at any time.

4. How we collect it#

Mostly directly from you: when you fill in a form, import a file, enter an account, use Ask Finsplore, or email us. Some information is collected automatically by our website and apps (sections 2 and 9). If you sign in with Google or Apple, we receive your name and email address from them. If you use an invite code someone gave you, we learn that the code was used.

5. Why we use it#

We use personal information to:

• run Finsplore for you: show your accounts, spending, net worth, budgets, goals, projections and insights, and answer your questions in Ask Finsplore;
• categorise transactions and detect duplicates in your imports;
• manage the waitlist and send you your invite;
• keep accounts secure, prevent fraud and misuse, and fix problems;
• respond to you and provide support;
• understand how people use the site and apps so we can improve them, using aggregated or de-identified information where we can;
• send service messages (for example, security alerts and changes to these terms) and, if you agreed, news about Finsplore (section 8);
• meet our legal obligations and enforce our terms.

We do not sell personal information, rent it, or share it with advertisers. We do not use your financial information to train AI models offered by other companies. We do keep the category corrections you make (the transaction's description and amount, and the category you chose) and use them to improve Finsplore's own categorisation. They are deleted when you delete your account.

6. Automated processing, AI and decisions#

Finsplore uses software to do some things automatically:

• Categorisation. Our own rules and models, and for hard cases an AI model from OpenAI or Anthropic, suggest a category for each transaction. The AI model receives the transaction's description and amount. You can change any category, and your corrections help improve the suggestions.
• Insights and projections. Finsplore calculates figures such as your net worth, spending trends and goal or FIRE projections from the information you add and the assumptions you choose.
• Ask Finsplore. When you ask a question, relevant parts of your Finsplore data are sent to an AI model to generate the answer. Ask Finsplore uses AI models from OpenAI, which process your question and that data in the United States.
• Voice guide on this website. If you tap "Talk to us", your voice is sent to an AI model from OpenAI, which answers from the pages of this website. It may process the audio outside Australia, including in the United States. We do not record calls or keep the audio. We log the questions people ask, with personal details removed, to improve our answers. Calls use no account data and end after three minutes.

These features produce general information for you. They do not make decisions that have a legal or similarly significant effect on you: we do not approve or decline anything, set prices for you, or decide what products you can access.

AI output can be wrong. Check anything important against your own records.

7. Who we share it with, and where they are#

We share personal information only with service providers who help us run Finsplore, and only what they need to do that job. They must protect it and use it only for us.

We configure our error monitoring and analytics to avoid sending your financial data to them.

Overseas disclosure. As the table shows, some personal information is disclosed to providers outside Australia, including in the United States and the European Union: technical and usage information, your email address, crash and error details, and, when you use Ask Finsplore or categorisation, the parts of your financial data those features need. Before we do so we take reasonable steps, including contractual terms, so that they handle it consistently with the APPs.

We may also disclose personal information:

• if the law requires or allows it, for example to a court, regulator or law enforcement body;
• to protect someone's life, health or safety, or our rights, users or systems;
• to professional advisers (lawyers, accountants, auditors) under a duty of confidence;
• to a buyer or successor if our business is sold or restructured, who must handle it under this policy.

8. Email and marketing#

We send service messages you cannot switch off while you have an account (for example, sign-in codes, security alerts and important changes). We send news, product updates and offers only if you agreed. Every such email says who it is from and has an unsubscribe link that works without signing in; we act on unsubscribe requests within 5 working days.

We do not send text messages (SMS) at all. We keep your mobile number on your profile and do not currently use it to contact you; we will not use it for marketing without your separate consent. We do not email people a user has referred to us unless they have agreed to hear from us.

9. Cookies and analytics#

Our website and apps use a small number of cookies and similar technologies:

• Essential: to keep you signed in to the web app and keep it secure. These cannot be switched off.
• Analytics: we use PostHog, set up so it stores no cookies on your device and does not record what you type, to count visits, see which pages people use and whether the waitlist form works. We also use Google Analytics, which uses cookies to count visits and campaign sign-ups, with advertising features and Google signals switched off. We do not use advertising pixels (such as Meta or Google Ads tags) and we do not track you across other websites.

If you opt in to usage analytics in the app, we send our analytics provider (listed in section 7) a record each time we read a statement, holding only the bank, the file type and whether we read it automatically, under a pseudonymous identifier. It never includes amounts, descriptions, dates or account numbers. The identifier is a keyed code that we, but not the provider, can link back to your account, so we still treat it as personal information.

Details and how to opt out are in our Cookies notice. We do not respond to browser "Do Not Track" signals because we do not track you across other sites in the first place.

10. How we protect it#

We use encryption in transit (HTTPS), access controls, and logging. Inside our team, access to users' financial information is limited to people who need it. No system is completely secure, so we also plan for incidents (section 14). If you find a security problem, please tell us: see our security page.

11. How long we keep it#

• Waitlist: until early access invites finish, or until you ask us to remove you.
• Account and financial information: while your account is open. When you delete your account, your profile, accounts, transactions, budgets, goals, plans and profile photo are deleted from our live systems straight away, and your sign-in is removed. Copies in our backups are overwritten as those backups expire.
• What we keep after deletion: a short deletion record (your email address, account identifiers, the time and the IP address the request came from) so we can prove the deletion happened and stop a deleted account being used again, and records of actions taken on your account in our security audit log.
• Imported statement files: kept for 7 days after the import so you can view the statement again, then deleted. Undoing the import, removing the account it went into, or deleting your Finsplore account deletes them straight away. If you upload a file and do not finish the import, we delete it after 6 hours. If an import fails, we delete its file as soon as it is marked as failed, and a background check removes any file we miss within about 6 hours.
• Notifications: dismissed ones after 30 days, read ones after 90 days, unread ones after 180 days. Unusual-transaction alerts after 365 days.
• Support conversations, logs and records we must keep by law: for as long as needed for those purposes.

When we no longer need information, we delete it or de-identify it.

12. Access, correction, export and deletion#

You can:

• see and correct most of your information in the app;
• export your profile, goals, budgets, the assets and liabilities you add, the categories you create and your notification settings from your account settings in the web app. Imported accounts, balances and transactions are not in the export yet.
• delete your account from your account settings;
• ask us for a copy of the personal information we hold, or to correct it, by emailing support@finsplore.io.

We may need to confirm your identity first. We aim to respond within 30 days. Access is free. If we refuse a request, we will tell you why in writing and how to complain.

13. Complaints#

If you think we have mishandled your personal information, email support@finsplore.io with what happened. We will acknowledge it, look into it, and reply in writing within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992. See also our complaints page.

14. Data breaches#

If a data breach is likely to cause you serious harm, we will tell you and the OAIC as the Notifiable Data Breaches scheme requires, and explain what you can do.

15. Bank connections (Consumer Data Right)#

Finsplore does not use the Consumer Data Right during early access, and we are not an accredited data recipient. If we later offer bank connections, they will only be set up with your express consent through an accredited provider, and we will update this policy and link to the CDR policy that applies before that feature is turned on. At that point we will share your name, email address and mobile number with that provider to set up the connection.

16. Children#

Finsplore is for people aged 18 and over. We do not knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.

17. Changes to this policy#

We will update this policy when our practices change, and change the date at the top. If a change materially affects how we handle your information, we will tell you by email or in the app before it takes effect.

18. Contact us#

Finsplore Pty Ltd, ACN 703 770 496
Email: support@finsplore.io (put "Privacy" in the subject line)

Questions about this page? Email support@finsplore.io.