Workflow & Automation · finny.comFINNY AI
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes the procedure and criteria for determining how long Personal Data is retained, including necessity for service delivery, business purposes, data sensitivity, and legal obligations, and permits extended retention to comply with legal requirements or resolve disputes.
Grants California residents the right to contact the company to prevent disclosure of their Personal Data to third parties for direct marketing purposes, and provides a contact mechanism to exercise that right.
Discloses that personal data is shared with service providers and other parties listed in the section, and acknowledges that under certain state laws some disclosures may constitute a 'sale,' directing users to state-specific sections for further information.
How to read this page: Overall risk rates what FINNY AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 39 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 39 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Permits the company to create aggregated, de-identified, or anonymized data from collected personal data and to use and disclose it with third parties for lawful business purposes including service analysis, improvement, and business promotion, provided the data cannot be used to identify individual users.
" We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or ..."
Establishes the procedure and criteria for determining how long Personal Data is retained, including necessity for service delivery, business purposes, data sensitivity, and legal obligations, and permits extended retention to comply with legal requirements or resolve disputes.
" We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories o..."
Grants permission to collect, use, and disclose personal data to government entities including law enforcement to satisfy legal obligations, court orders, security incident investigations, protection of rights or safety, and enforcement of agreements.
" In addition, each of the above referenced categories of Personal Data may be collected, used, and disclosed with the government, including law enforcement, or other parties to meet certain legal requirements and enforcing legal terms inclu..."
Defines service providers as parties that help provide the services or perform business functions on the company's behalf, establishing the scope of this recipient category.
" These parties help us provide the Services or perform business functions on our behalf."
Permits transfer of all collected personal data to a third party that assumes control of the business in a merger, acquisition, bankruptcy, or similar transaction.
" All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part)."
Clause A states that users must email the company to modify cookie preferences, while Clause B states that users can manage cookie acceptance and deletion through their browser settings, creating confusion about the primary method for managing the platform's cookies.
" To explore what Cookie settings are available to you or to modify your preferences with respect to Cookies, you can access your Cookie management settings by reaching out to us at hello@finny.com . To find out more information about Cookies generally, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/ ."
" You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as(depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete allCookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Under California Civil Code Sections 1798.83-1798.84,California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at hello@finny.com ."
Grants California residents the right to contact the company to prevent disclosure of their Personal Data to third parties for direct marketing purposes, and provides a contact mechanism to exercise that right.
AI-generated interpretation, not legal advice.
" We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally."
Establishes the procedure and criteria for determining how long Personal Data is retained, including necessity for service delivery, business purposes, data sensitivity, and legal obligations, and permits extended retention to comply with legal requirements or resolve disputes.
AI-generated interpretation, not legal advice.
" We disclose your Personal Data to the categories of service providers and other parties listed in this section. Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below."
Discloses that personal data is shared with service providers and other parties listed in the section, and acknowledges that under certain state laws some disclosures may constitute a 'sale,' directing users to state-specific sections for further information.
AI-generated interpretation, not legal advice.
" We may disclose any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Other PermittedPurposes for Processing Personal Data” section above."
Grants permission to disclose any collected personal data to third parties when doing so falls within the activities enumerated in the 'Other Permitted Purposes for Processing Personal Data' section, incorporating that section by reference.
AI-generated interpretation, not legal advice.
" We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice or obtaining your consent."
Restricts the company from collecting additional categories of personal data or using collected personal data for materially different, unrelated, or incompatible purposes without first providing notice or obtaining consent — user-favorable restriction on scope of data use.
AI-generated interpretation, not legal advice.
" We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve theServices and promote our business, provided that we will not disclose such data in a manner that could identify you. "
Permits the company to create aggregated, de-identified, or anonymized data from collected personal data and to use and disclose it with third parties for lawful business purposes including service analysis, improvement, and business promotion, provided the data cannot be used to identify individual users.
AI-generated interpretation, not legal advice.
" As noted in the Terms of Use, we do not knowingly collect or solicit Personal Data from children under 13 years of age; if you are a child under the age of 13, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 13 years of age, we will delete that information as quickly as possible."
Prohibits knowingly collecting or soliciting Personal Data from children under 13, instructs such children not to use the Services, and imposes an obligation to delete any inadvertently collected data from children under 13 as quickly as possible — protective of minors.
AI-generated interpretation, not legal advice.
" Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A."
Declares that the company does not currently sell Personal Data as that term is defined under a specific state statute, protective of users by asserting a non-sale position.
AI-generated interpretation, not legal advice.
" As we continually work to improve our Services, we may need to change this Privacy Policy from time to time. We will alert you of material changes by placing a notice on the FINNY AI website, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes."
Establishes the procedure for notifying users of material changes to the Privacy Policy (via website notice, email, or other means) and states that continued use of the Services after changes constitutes acceptance, and that users are responsible for reading updates even if they have opted out of email notices.
AI-generated interpretation, not legal advice.
" This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as“personally identifiable information” or “personal information” or “sensitive personal information” under applicable data privacy laws, rules or regulations.This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage."
Defines 'Personal Data' as any information that identifies or relates to a particular individual including personally identifiable information and sensitive personal information under applicable laws, and specifies the policy does not cover practices of third-party companies or persons the company does not control or manage.
AI-generated interpretation, not legal advice.
" Providing support and assistance for the Services."
Permits the company to collect and use personal data to provide support and assistance for the Services as a stated commercial or business purpose.
AI-generated interpretation, not legal advice.
" We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure."
Imposes an obligation on the service provider to protect Personal Data using appropriate physical, technical, organizational, and administrative security measures calibrated to data type and processing method, while also instructing users to protect their own credentials and account access.
AI-generated interpretation, not legal advice.
" FINNY’s mission is to empower financial advisory firms to grow organically. In doing so, we are committed to protecting the privacy and security of our users’ data. This Privacy Policy outlines how we handle, store, and use data collected from our customers, financial advisory firms, and their clients."
Defines the scope of the Privacy Policy by stating it outlines how the company handles, stores, and uses data collected from customers, financial advisory firms, and their clients — establishing the foundational subject matter of the policy.
AI-generated interpretation, not legal advice.
" Thank you for visiting https://www.finny.com (the “Sites”) owned and operated by Finny AI, Inc. At Finny AI, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data."
Identifies the entity (Finny AI, Inc.) operating the Sites and introduces the Privacy Policy as the instrument governing treatment of personal data, defining the scope of data subjects and the operator.
AI-generated interpretation, not legal advice.
" By using or accessing our Sites in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and disclose your information as described in this Privacy Policy."
Imposes consent on users by stating that accessing or using the Sites in any manner constitutes acknowledgment and consent to the collection, use, and disclosure of personal data as described in the policy.
AI-generated interpretation, not legal advice.
" Remember that your use of Finny AI’s Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use."
Incorporates this Privacy Policy into the Terms of Use by cross-reference and specifies that undefined terms in the Policy carry the meanings given in the Terms of Use, creating a legal linkage between documents.
AI-generated interpretation, not legal advice.
" This chart details the categories of Personal Data that we collect and have collected over the past 12 months:"
Introduces a chart detailing the categories of personal data collected and collected over the past 12 months, establishing the scope and historical window of data collection practices.
AI-generated interpretation, not legal advice.
" Creating and managing your account or other user profiles."
Permits the company to collect and use personal data for the purpose of creating and managing user accounts or other user profiles as a stated commercial or business purpose.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from FINNY AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in FINNY AI's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in FINNY AI's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat FINNY AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in FINNY AI's published policies yet.
What the policies actually cover
0 topicsNone of FINNY AI's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we...”Open source citation
The clause permits sale of personal data or information.
“Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We disclose your Personal Data to the categories of service providers and other parties listed in this section. Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may disclose any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Other PermittedPurposes for Processing Personal Data” section above.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve theServices and promote our business, provided that w...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| All applicable tiers | training use | worsens | HIGH | 1 |
| Team / Business | data retention | conditional | MEDIUM | 1 |
| Team / Business | privacy data use | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“We disclose your Personal Data to the categories of service providers and other parties listed in this section. Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Other PermittedPurposes for Processing Personal Data” section above.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve theServices and promote our business, provided that we will not disclose such data in a manner that could identify you.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Under California Civil Code Sections 1798.83-1798.84,California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at hello@finny.com .”Open timeline citation
Latest stance: sale or sell on privacy data use
“Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.”Open timeline citation
Latest stance: training permitted on training use
“Google Workspace APIs will not be used to develop, improve, or train generalized AI and/or ML models.”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
50 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of FINNY AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified FINNY AI's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from FINNY AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.