Privacy Policy

1. Scope

This Privacy Policy explains how Finch Technologies, LLC ("Finch," "we," "us," or "our") collects, uses, and shares personal information in connection with the Finch websites and application, including https://getfinch.co and https://app.getfinch.co.

This policy covers personal information about people who visit our marketing site, request a demo, create a Finch account, or use the Finch application as an authorized user.

This policy is not a Business Associate Agreement ("BAA"). Patient protected health information and other data Finch processes on behalf of a customer organization ("Customer Data") is handled under that organization's customer agreement and, where applicable, its BAA with Finch. This policy does not govern Customer Data except to explain that distinction.

2. Information we collect

We collect information you provide, information collected automatically, and information from your organization or other third parties.

Information you provide may include:

• Account details such as name, email address, phone number, role, and organization.
• Communications, including support requests, feedback, and demo or contact-form submissions.
• Records of your agreement to these legal terms, including the time you accepted them.

Information collected automatically may include:

• Device and usage data such as IP address, browser type, pages viewed, referring URL, and approximate location derived from IP address.
• Log data and diagnostic information used to operate, secure, and debug the Service.
• Cookies and similar technologies on our marketing site and, where used, product analytics that help us understand how the Service is used.

Information from others may include account details provisioned by your organization (for example, when an administrator invites you) and limited data from service providers who help us operate Finch.

3. How we use information

We use personal information to:

• Provide, maintain, secure, and improve the Service.
• Create and administer accounts, authenticate users, and remember that you agreed to our Terms and this Privacy Policy.
• Communicate with you about the Service, including support, product updates, and (where permitted) marketing. You may opt out of marketing emails using the unsubscribe link.
• Analyze usage, prevent fraud and abuse, and comply with law.
• Respond to requests, investigations, or legal process.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are commonly used in U.S. state privacy laws.

4. How we share information

We may share personal information with:

• Your organization, including administrators, who can see that you have an account and, depending on role, activity in the Service.
• Service providers that host infrastructure, email, analytics, customer support, or similar functions, under contracts that limit their use of the data.
• Professional advisors such as lawyers, auditors, and insurers, where needed.
• A buyer or successor if we are involved in a merger, acquisition, or sale of assets.
• Authorities when we believe disclosure is required by law or necessary to protect rights, safety, or the Service.

We may share de-identified or aggregated information that cannot reasonably identify you.

5. Customer Data and PHI

When your organization uses Finch, it may submit patient, case, supply, billing, and similar information. Finch processes that Customer Data as a service provider / processor (and, where HIPAA applies, potentially as a business associate) for the organization. Your organization is responsible for having the legal right to submit that data and for configuring access inside Finch.

If you have questions about patient information in Finch, contact your organization. Finch cannot fulfill patient access or deletion requests for Customer Data except as directed by the customer or required by law.

6. Cookies and analytics

Our marketing site and application may use cookies, local storage, and similar technologies that are necessary to run the Service (for example, to keep you signed in) and, where enabled, to understand product usage. You can control cookies through your browser settings. Blocking some cookies may affect sign-in or other features.

7. Retention

We keep account information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. We keep a record of legal-term acceptance for as long as we need to show that you agreed. When an account is closed, we delete or de-identify personal information when we no longer have a legitimate need to keep it, unless a longer period is required by law or by the customer agreement.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You can help by using a strong unique password and by notifying us of suspected unauthorized access.

9. Your choices and rights

You may update certain account profile information in the Finch application. You may also contact us to request access, correction, or deletion of personal information we hold about you as a Finch user, subject to legal and contractual limits (including that we cannot delete Customer Data your organization still needs, or records we must keep).

Depending on where you live (including California and other U.S. states with consumer privacy laws), you may have the right to know, access, correct, delete, or obtain a copy of personal information, and to opt out of certain sharing. We will not discriminate against you for exercising these rights. To submit a request, email us at the address below. We may need to verify your identity. You may use an authorized agent where the law allows, with proof of authorization.

These rights apply to personal information Finch holds about you as a user or visitor. They generally do not apply to Customer Data processed only on behalf of your organization; those requests should go to your organization.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. International users

Finch is operated from the United States. If you access the Service from another country, you understand that your information may be processed in the United States, which may have different data-protection rules than your country.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy and revise the "Last updated" date. Material changes may be communicated in the Service. Your continued use of the Service after an update means you accept the updated policy.

13. Contact

Privacy questions or requests: Finch Technologies, LLC, team@getfinch.co.