1. Who we are and when this policy applies
FinTrack is a financial management platform for businesses operated by HELIXDEV ("FinTrack", "we", or the "service"). This policy applies to fintrack-ks.com, the FinTrack application, and its connected integrations.
The business that creates a FinTrack account controls its business data and the data it enters about clients, suppliers, employees, and transactions. FinTrack processes that data to provide the requested service.
2. Information we collect
We collect only the information needed to create accounts, provide application features, and keep the platform secure.
- Account data: name, email, role, language, and authentication details.
- Business data: trading name, fiscal and VAT numbers, address, logo, and invoice preferences.
- Financial and operational data you enter: invoices, expenses, payments, clients, suppliers, products, employees, payroll, documents, and reports.
- Technical and security data: IP address, device, browser, sign-in time, audit records, and system errors.
- Information from integrations you enable, including Gmail or your own SMTP server.
3. How we use information
We use information to provide, maintain, and improve FinTrack; create documents and reports; send invoices or reminders you request; provide support; and prevent fraud, misuse, and unauthorized access.
Where required, information may be used to meet legal obligations or respond to valid requests from public authorities.
4. Google user data and Gmail connection
If you choose "Connect Gmail", FinTrack requests basic Google account identity (openid and email) and the gmail.send permission only. This lets FinTrack send, on your behalf, only the emails you initiate in the application, such as invoices, reminders, and test messages.
FinTrack does not read your inbox, existing messages, contacts, Google Drive files, or calendar. We do not use Google user data for advertising, profiling, credit decisions, training general-purpose AI models, or sale to third parties.
OAuth tokens are stored in encrypted form and associated only with your tenant. Google user data is used and transferred only to provide the requested sending feature, to technical service providers that enable it, or where legally required.
FinTrack's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
6. Security and retention
We use technical and organizational safeguards including encryption in transit, access controls, tenant separation, and audit records. No system is risk-free, so you should use a strong password and secure your devices.
Information is retained while your account is active and as needed to provide the service, meet legal obligations, resolve disputes, and protect the platform. Backups may remain for a limited period before secure overwrite.
7. Your choices, disconnection, and deletion
You can update profile and business details in Settings. You can disconnect Gmail at any time in Email Settings, which stops use of the stored token. You can also revoke access from your Google Account security page.
To request access, correction, export, or deletion of your account and data, contact support@fintrack.com from your account email. We may need to verify your identity and retain only information required by law.
9. International processing and children
Our technical providers may process information outside Kosovo. Where this occurs, we use appropriate contractual and technical safeguards.
FinTrack is a business service and is not intended for anyone under 18. If you believe a minor has provided personal information to us, please contact us.
10. Changes and contact
We may update this policy when the service, technology, or law changes. The latest version date appears above. We will provide a prominent in-app or email notice for material changes where required.
For privacy questions, complaints, or requests, email support@fintrack.com. Use the email connected to your account when the request concerns tenant data.
