Privacy Policy and Data Protection – FinAI

This Privacy Policy defines the strict data security protocols that FinAI ("the Platform", "we", "us" or "our") employs to protect user information processed via https://finai-platform.com. Located in the Oval Tower in Amsterdam, we are unconditionally committed to protecting your digital privacy in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy legislation.

Data Architecture and Collection

To provide a secure and high-quality AI-driven analysis environment, we systematically collect the following categories of personal data:

Identity Data

Full name, date of birth, and official identification documents required for mandatory Know Your Customer (KYC) verification.

Contact Information

Verified email address, active phone number, and registered residential address.

Digital Telemetry

IP addresses, browser specifications, geographical routing data, and detailed interaction logs of your interactions with our AI interfaces.

Compliance Data

Information required to comply with the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft).

Legal Basis for Processing

In accordance with European legislation, we process your personal data based on:

Contractual necessity: To manage your account and provide our technical analysis services.
Legal obligations: To comply with national regulations imposed by the Dutch authorities.
Legitimate interests: For fraud prevention, network security, and the optimization of our AI models through anonymized datasets.

Security Standards and Retention

FinAI uses enterprise-grade 256-bit AES encryption for all data transfers. Your personal information is hosted on strictly secured servers with limited access within the EEA. We do not retain personal data longer than necessary for the stated purposes or as legally required by Dutch retention obligations (usually 7 years for financial administration).

Your Rights under the GDPR

The GDPR grants you full control over your data. You have the right to:

Right of access

Request a copy of the data we hold about you.

Right to rectification

Demand correction of inaccurate or outdated information.

Right to erasure

Request deletion of your data ("Right to be forgotten').

Right to data portability

Receive your data in a structured format.

To exercise these rights, please contact our Data Protection Officer via [email protected].

Effective date: March 28, 2026.