Privacy Policy

1. What data we collect

When you use the tool, we process:

• Business name (optional) and the reporting period you select.
• The P&L figures you enter: revenue, gross profit, operating expenses, EBITDA, net profit, gross and net margins, and any free-text context you add.
• Your email address, which you provide to Stripe at checkout when you pay for a commentary.
• Contact-form data (your name, email, reason for contact and message) if you use our contact form, which is processed through Formspree.

The figures you enter are business financial data. They may not contain personal data at all; where they do (for example a business name that identifies a sole trader), this policy applies to that personal data.

2. Processors we use

We rely on the following service providers (processors) to run the service:

• Anthropic — generates your commentary using its Claude AI models (processing takes place in the United States).
• Stripe — processes your payment and handles your email and card details for the transaction.
• Vercel — hosts the website and serves requests.
• Formspree — delivers messages sent through our contact form.

3. Why we process your data (lawful bases)

• Performance of a contract — to generate and deliver the commentary you have asked for and to process your payment.
• Legitimate interests — to operate, secure and improve the service, and to respond to enquiries you send us.
• Consent — where you give it, for example by submitting the contact form or ticking the immediate-performance box at checkout.

4. How long we keep it (retention)

• The figures and inputs you enter are not retained after the commentary is generated.
• Generated commentary is deleted within 30 days.
• Payment records are kept for as long as we are legally required to keep them (for example for tax and accounting purposes).
• Contact-form messages are kept only as long as needed to deal with your enquiry.

5. International data transfers

To generate your commentary we send the figures you enter to our AI provider, Anthropic, which processes them on servers in the United States. Where personal data is transferred outside the EEA (Anthropic, and where applicable Stripe and Vercel), the transfer is protected by appropriate safeguards — Standard Contractual Clauses and/or the EU–US Data Privacy Framework — under each provider's data-processing terms. Anthropic does not use data submitted through its API to train its models.

6. Cookies and local storage

We do not use tracking or advertising cookies. The app stores a small credit count in your browser's localStorage so that, once you have paid, your generated commentary can be unlocked on your device. This data stays in your browser and is not used to track you across other sites. Our payment provider Stripe may set cookies that are strictly necessary to process your payment.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email us at hello@finnarrate.com. We will respond within the timeframes required by law.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie) or your local supervisory authority.

8. Contact

Questions about this policy or your data? Email hello@finnarrate.com.