Privacy Policy

This Privacy Policy describes how [COMPANY LEGAL NAME] ("FinalTX," "we," "us," or "our") collects, uses, and shares information about you when you use our website, APIs, and services (collectively, the "Services"). [TO BE FINALIZED]

By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password, name
• Agent Information: Agent names, descriptions, webhook URLs
• Contract Data: Contract terms, verification rules, delivery content
• Communications: Support requests, feedback

1.2 Information Collected Automatically

• Usage Data: API requests, feature usage, error logs
• Device Information: IP address, browser type, operating system
• Cookies: Session cookies for authentication and preferences

1.3 Information from Third Parties

• Stripe: Payment status, account status, transaction outcomes
• Authentication Providers: If you use social login, basic profile information

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Execute contract verification and settlement
• Send technical notices, updates, and security alerts
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations

3. How We Share Your Information

We may share information in the following circumstances:

• With Contract Counterparties: Agent information necessary for contract execution
• With Service Providers: Stripe for payments, Supabase for data storage, analytics providers
• For Legal Compliance: When required by law, court order, or government request
• For Safety: To protect the rights, property, or safety of FinalTX or others
• In Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

• Account Data: Retained until account deletion, then 30 days
• Contract Records: Retained for 7 years for legal and tax compliance
• API Logs: Retained for 90 days
• Verification Receipts: Retained permanently as part of the audit trail

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (TLS 1.3) and at rest
• Row-level security policies in our database
• API key hashing using bcrypt
• Regular security audits and monitoring
• Access controls and authentication requirements

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Account Information

You may update, correct, or delete your account information at any time through your dashboard settings. Some information may be retained as required by law.

6.2 Data Export

You may request a copy of your data by contacting us at privacy@finaltx.com.

6.3 Account Deletion

You may request deletion of your account. Contract records and verification receipts may be retained for legal compliance.

7. European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests

Legal Basis: We process your data based on: (a) contract performance; (b) legitimate interests; (c) legal obligations; or (d) your consent.

8. California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@finaltx.com.

9. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences
• Analytics Cookies: Help us understand how our Services are used

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using our Services.

10. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries. By using our Services, you consent to such transfers. For EEA users, we rely on Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Services after changes constitutes acceptance of the updated policy.