Finstory Privacy Policy
This policy explains what information Finstory Consultants ("Finstory", "we", "us") collects through FVQ (the "Service"), how we use it, and how we protect it. FVQ is a financial reporting service built for businesses using Tally and other accounting software.
What we collect
Two kinds of information pass through FVQ:
- When you fill out the interest form: company name, your name, email, phone number, which accounting software you use, and any note you add.
- Once you're a client: your login credentials (passwords are stored hashed, never in plain text), and the accounting data you or we upload to generate your reports - this can include raw exports from Tally (or another accounting system) and the financial reports built from them.
We also use a functional session cookie to keep you logged in. It's required for the Service to work and isn't used for tracking or advertising. If we add analytics in the future, this policy will be updated to say so before it happens.
How we use it
- To set up your account and respond to your interest form submission.
- To process your accounting data into the financial reports FVQ provides.
- To communicate with you about your account, billing, or the Service.
We do not sell your data, and we do not share it with third parties except where necessary to operate the Service itself (for example, our hosting provider, purely as infrastructure - they don't get separate access to use your data for their own purposes).
How we protect it
Client accounts are role-restricted, so one client can never see another client's data. Uploaded files are validated before being stored, sessions use CSRF protection, and login attempts are rate-limited against brute-force guessing. No system is perfectly secure, but this is actively maintained, not a one-time setup.
How long we keep it
We keep your data for as long as your account is active, plus a reasonable period afterward for accounting and legal record-keeping. If you'd like your data deleted sooner, contact us and we'll act on it, subject to any records we're legally required to retain.
Your rights
You can ask us at any time to see what data we hold on you, correct it, or delete it (subject to the retention note above). If you submitted the interest form and haven't become a client, you can ask us to remove your submission entirely.
Children
FVQ is a business tool and isn't directed at, or knowingly used by, anyone under 18.
Changes to this policy
If this policy changes in a material way, we'll update the date at the top of this page. Significant changes affecting active clients will be communicated directly.