Privacy Policy

• Contact and booking details you send us: name, email, company and message, and the time you book for a call.
• Account details: your name and email, and your role on your company's portal.
• What you put in the portal: documents you upload, messages, requests and the financial information you or Fincap enter for your engagement or personal plan.
• Business evaluator inputs: the kind of business, your description of the idea, and your answers.
• Payment records: what you bought, the amount and the date. Card and bank details are entered on Stripe's page and never reach us.
• Usage information: on our public pages (not the client portal), which pages you visit, how you found us and the kind of device you use, through Google Analytics.
• Technical information: sign-in cookies, and your network address, which we keep only as a one-way hash to apply usage limits and in our security logs.

• To provide our services and the portal, and to answer you.
• To produce evaluator reports and the detailed reports you buy, and to improve our library of business models.
• To send emails you need: sign-in links, replies, reports and portal notifications.
• If you tick “Email me insights and offers”, to send you our marketing emails, tailored to what you've done with us (for example, the kind of business you modelled). Every marketing email has an unsubscribe link.
• To understand how people find and use our public pages, so we can improve them.
• To keep the site secure, prevent abuse and keep records the law requires.

When you ask the evaluator to build a model for an idea, your description is sent to our AI provider, Anthropic, to draft the model. It isn't used by us to identify you, and models drafted this way are reviewed by Fincap before being offered to anyone else. Your name and email are not sent with it.

We don't sell your information. We share it only with the providers that run the site for us, under their own privacy terms:

• Cloudflare (hosting and file storage) and Supabase (database).
• Stripe (payments) and Mercury (invoicing for advisory clients).
• Resend (email delivery) and Google (calendar for booked calls).
• Klaviyo (marketing email): your name, email address and your activity with us, such as models you saved, reports you bought and calls you booked. Only people who opted in are added to our email list.
• Google Analytics (website statistics for our public pages), with Google signals and ad personalization turned off.
• Anthropic (AI model drafting, as described above).

We may also share information when the law requires it, or to protect our rights or someone's safety.

We use cookies to keep you signed in, and Google Analytics sets cookies on our public pages to count visits and see how people find us. The client portal and its pages are never sent to Google Analytics. We don't use advertising cookies or ad personalization. You can block Google Analytics with your browser's settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout). Your light or dark display preference is stored in your own browser.

We keep account and engagement information while you're a client or have an account, and afterwards as long as needed for our records and legal obligations. Ask us to delete your evaluator account and models at any time.

You can ask to see, correct or delete your information, or ask what we hold about you, by emailing nathan@fincapadvisors.co. You can unsubscribe from marketing emails at any time with the link in any of them; we'll keep sending the emails you need, such as sign-in links and receipts.

Information is encrypted in transit, access to the portal is by one-time sign-in links, and staff sign-in requires a password and an authenticator app. No system is perfectly secure; tell us right away if you think your account has been misused.

We'll update this policy when our practices change; the date at the top shows the latest version.