Privacy Policy & AI Data Compliance

1Introduction & Scope

Finara is uncompromisingly committed to protecting the privacy, security, and data sovereignty of all users. This Privacy Policy governs the entire Finara ecosystem, including our web applications, mobile applications, Remote Model Context Protocol (MCP) Server, and ChatGPT Plugin / OpenAI AI Agent integrations. By accessing or using Finara and our AI integrations, you explicitly agree to the data protection, boundary isolation, and minimization practices outlined in this policy.

2Categories of Personal Data Collected

We collect only the strictly minimum categories of personal data required to deliver personal finance management capabilities:

• Account Identifiers: Full name, username, email address, optional phone number (for WhatsApp OTP security verification), and securely hashed passwords (never stored in plaintext).
• User Financial Records: Income and expense transaction logs, financial account names and balances (bank, e-wallet, cash), budget limits, debt/receivable ledgers, savings targets, and asset valuations entered explicitly by you.
• AI Tool & Plugin Parameters: Isolated input parameters transmitted via authenticated OAuth 2.1 sessions when interacting with Finara through ChatGPT or AI agents (e.g., transaction amount, source account name, or expense category).
• Authentication & Session Data: Cryptographically signed short-lived JWT tokens, refresh tokens, and OAuth 2.1 (PKCE S256) authorization artifacts. We never store third-party credentials or raw authentication secrets in plaintext.

3Collection Minimization Principles

In accordance with ChatGPT plugin directory standards and data minimization requirements:

• Narrowly Scoped Collection: We gather strictly the minimum data required to execute the user's requested financial management tool. Inputs are specific, narrowly scoped, and explicitly linked to the stated task.
• No Speculative Fields: Input schemas are designed to limit data collection by default. We strictly avoid 'just in case' fields, broad profile data collection, or funnels designed for extraneous context.

4Response Minimization & Stripping Internal Telemetry

Every response returned by the Finara Remote MCP Server and ChatGPT integration adheres strictly to response minimization:

• Direct Query Relevance: Tool responses return only data that is directly relevant to the user's explicit query and the tool's stated purpose.
• Exclusion of Internal Telemetry & Identifiers: Tool responses strictly exclude diagnostic metadata, telemetry, internal session IDs, trace IDs, request IDs, server timestamps, or system logging metadata unless strictly required to fulfill the user's query.

5Prohibition of Restricted & Regulated Sensitive Data

Finara enforces a strict zero-tolerance policy against collecting, soliciting, or processing the following categories of restricted data:

6Data Boundaries: No Raw Location & No Full Chat Logs

Finara servers and AI integrations operate under strict isolation boundaries:

• No Raw Locationsolicitation: Finara input schemas never solicit raw location coordinates (such as GPS latitude/longitude) or precise physical addresses. Any location context is handled via client-controlled side channels to ensure auditable, revocable permission controls.
• Isolation from Full Chat Logs: The Finara MCP server strictly DOES NOT pull, reconstruct, or infer full chat logs or conversation histories from ChatGPT or client applications. We operate exclusively on the explicit parameters and snippets intentionally transmitted by the user or model.

7Purposes of Use & AI Usage Policy Alignment

Your personal data is used solely for legitimate, transparent purposes centered around your financial management needs:

• Delivering core personal budgeting, multi-account balance aggregations, transaction tracking, and savings goal progress.
• Executing authorized financial operations requested by you through secure OAuth 2.1 PKCE authorization.
• No Surveillance or Behavioral Profiling: We do not engage in surveillance, tracking, or behavioral profiling based on query patterns, IP addresses, or access timestamps.
• OpenAI Usage Policy Alignment: All Finara operations adhere strictly to OpenAI Usage Policies. User financial records are NEVER used to train public or commercial AI models.

8Action Transparency, Accurate Labels & Preventing Data Exfiltration

To prevent accidental mutations, execution errors, or data leakage:

• Read-Only Action Labeling: Tools that only inspect state (such as get_dashboard and help) are strictly tagged with readOnlyHint: true, are free of side effects, and are safe to retry.
• Write & Destructive Action Labeling: Any tool that modifies external state (logging transactions, updating budgets, deleting records, or transferring funds) is explicitly labeled as a write action with destructiveHint: true.
• User Confirmation Friction: AI clients require explicit user confirmation before executing tools marked as destructive, ensuring full user awareness before changes are committed.
• Preventing Data Exfiltration: Any action transmitting data or moving assets across boundaries is surfaced as a write action requiring confirmation or preview mode, eliminating accidental data exfiltration.

9Categories of Data Recipients & Third Parties

We do not sell, rent, or monetize your personal data. Limited data is only transmitted to essential operational infrastructure:

• Encrypted Cloud Infrastructure: Managed database and cache providers (PostgreSQL & Redis) with end-to-end encryption in transit (TLS 1.3) and at rest (AES-256).
• Transactional Notification Providers: Highly confidential service providers (Resend for email and authorized WhatsApp gateways) bound by strict confidentiality, utilized solely for delivering security OTP codes.
• Authorized AI Client Session: Tool responses are delivered solely back to your authenticated ChatGPT conversation session bound by your OAuth 2.1 token.

10Data Retention Timelines & Deletion Policy

We retain your data only for as long as necessary to provide your personal finance service:

• Active Account Data: Retained during the lifespan of your active account. You may modify or delete transactions, accounts, and budgets at any time.
• Ephemeral Data: Temporary OTP verification codes automatically expire and are purged from Redis after 5 minutes. OAuth authorization codes expire within 10 minutes.
• Permanent Account Deletion: When you request account deletion in Profile Settings, all personal data, financial records, session tokens, and integration credentials are permanently and irreversibly purged from our active databases.

11User Controls & Privacy Rights

You hold comprehensive rights over your personal data under applicable data protection laws (including GDPR and Indonesian PDP Law):

• Right of Access & Portability: You may view your complete financial summary in the dashboard and export transactions to spreadsheet formats anytime.
• Right of Rectification: You may modify your personal details, email, phone number, and financial ledgers at any time via Settings.
• Right to Revoke AI Plugin Access: You may disconnect or revoke Finara ChatGPT Plugin access at any time through ChatGPT plugin settings or Finara account settings, immediately revoking access tokens.
• Right of Erasure: You may request complete, permanent deletion of your account and all associated financial records without charge.

12Data Security, Essential Cookies & Official Support

We employ comprehensive security standards and provide direct support channels:

• Security Standards: End-to-end TLS 1.3/HTTPS encryption, robust password hashing, and OAuth 2.1 with PKCE S256.
• Essential Cookies Only: We utilize strictly functional cookies for authentication (access_token, refresh_token) and language preference (finara_lang). We do not use third-party advertising or cross-site tracking cookies.
• Official Privacy & Support Contact: If you have inquiries regarding this privacy policy, wish to exercise your data subject rights, or require technical support for the ChatGPT plugin, please contact: