Privacy Policy

1. Introduction

FinVerified, Inc. ("FinVerified," "we," "us," or "our") operates the FinVerified compliance, training, and certification platform at finverified.ai (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our Platform.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform. Questions may be directed to privacy@finverified.ai.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account registration data (name, work email address, practice name)
• Practice profile information (practice type, size, locations)
• Free-tool inputs (practice metrics entered into our diagnostic tools)
• Communications with our team (support requests, email correspondence)

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain information, including IP address, browser type, operating system, referring URLs, pages viewed, and session duration. We use cookies and similar tracking technologies as described in our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send related information
• Send transactional and promotional communications (with your consent)
• Monitor and analyze usage patterns to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations, including SOC 2, HIPAA, and applicable state law

4. Sharing of Information

We do not sell your personal information. We may share your information with:

• Service providers who perform services on our behalf (cloud infrastructure, email delivery, CRM, analytics) under data processing agreements
• Lenders in our network only to the extent necessary to facilitate a financing connection you initiate
• Law enforcement or regulators when required by applicable law or valid legal process
• Successors in connection with a merger, acquisition, or sale of all or substantially all of our assets

5. Healthcare Data and HIPAA

Where FinVerified acts as a Business Associate under HIPAA, the handling of Protected Health Information (PHI) is governed by our Business Associate Agreement (BAA), which is incorporated into our Provider Service Agreement. FinVerified does not store PHI in its diagnostic or scoring systems; patient-level data is identified only by anonymised session tokens.

6. Data Retention

We retain personal information for as long as necessary to provide the Platform and fulfil the purposes described in this policy, unless a longer retention period is required by law. Audit logs are retained for a minimum of seven (7) years to satisfy SOC 2 and regulatory requirements. You may request deletion of your account data by contacting privacy@finverified.ai.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@finverified.ai. We will respond within the timeframe required by applicable law.

8. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls, and annual SOC 2 audits. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

For questions about this Privacy Policy or our data practices, contact: