PRIVACY NOTICE
- Visit our website at fintent.ai, or any website of ours that links to this privacy notice
- Engage with us in other related ways ― including any sales, marketing, or events
Do we process any sensitive personal information?We do not intentionally collect or process special categories of personal data under the General Data Protection Regulation (“GDPR”) or “sensitive personal information” as defined under the California Privacy Rights Act (“CPRA”) — including, for example, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, data concerning a person’s sex life or sexual orientation, precise geolocation, government-issued identifiers, or financial account credentials.
In the course of providing sales, onboarding, and customer support, we may incidentally receive such information — for example, if a user voluntarily discloses it in a support email or a sales call. Where this occurs, we use the information solely to respond to the request in which it was provided, do not add it to any profile or analytics system, and retain it only for as long as necessary for that limited purpose.
Fintent’s API and MCP Services are designed for querying company-level intent signals and are not intended to be used to submit sensitive personal data about individuals. You agree not to submit such data through our API or MCP Services.
- names
- email addresses
Sensitive Information. We do not intentionally collect or process special categories of personal data under the General Data Protection Regulation (“GDPR”) or “sensitive personal information” as defined under the California Privacy Rights Act (“CPRA”) — including, for example, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, data concerning a person’s sex life or sexual orientation, precise geolocation, government-issued identifiers, or financial account credentials.In the course of providing sales, onboarding, and customer support, we may incidentally receive such information — for example, if a user voluntarily discloses it in a support email or a sales call. Where this occurs, we use the information solely to respond to the request in which it was provided, do not add it to any profile or analytics system, and retain it only for as long as necessary for that limited purpose.
Fintent’s API and MCP Services are designed for querying company-level intent signals and are not intended to be used to submit sensitive personal data about individuals. You agree not to submit such data through our API or MCP Services.
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
Information collected through the Fintent API and AI Assistant Integrations
In Short: When you use our Public API or connect Fintent to an AI assistant, we collect authentication data, the parameters of your requests, and the responses we return, so we can deliver the service, enforce usage limits, and prevent abuse.
In addition to the website data described above, when you access Fintent through our Public API (described at https://app.fintent.ai/api/docs) or through an authorized AI assistant integration (including the Fintent Model Context Protocol (“MCP”) server), we may collect and process the following:
– Account and authentication data — your Fintent account identifier, the email address associated with your account, your API key, and, for OAuth-based AI assistant integrations, OAuth 2.0 access and refresh tokens and the identifier of the AI assistant client connecting on your behalf.
– Request and response data — the parameters you submit in API or MCP requests (for example, company domains, screener names, screener IDs, signal types, minimum score thresholds, pagination parameters) and the responses we return to those requests.
– Service and diagnostic metadata — request timestamps, the IP address the request originated from, user-agent or client identifier, response codes, latency, and error or rate-limit events associated with your account.
– Usage metrics — aggregate and per-account statistics, including the number of unique companies queried per week, which we use to enforce plan limits and to maintain service quality.
We do not use the contents of your API or MCP requests to train third-party AI models. Request and response data is retained only for the operational period necessary to support rate limiting, billing accuracy, abuse prevention, and customer support, as described in Section 6 (“HOW LONG DO WE KEEP YOUR INFORMATION?”).
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
- To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
- Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Click here to learn more.
- Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
We may share your personal information in the following situations:
Service providers and sub-processors. We engage third-party service providers (“sub-processors”) who process personal information on our behalf and under written data processing agreements. These sub-processors fall into the following categories:
– Cloud hosting and infrastructure — to host the Fintent application, Public API, and MCP server, and to store associated data.
– Databases, data warehousing, and analytics infrastructure — for operational storage and internal analytics.
– Email, newsletter, and customer communication providers — to deliver transactional emails, product updates, and support correspondence.
– Customer relationship management (CRM) and sales enablement tools — to manage sales pipeline and customer records.
– Product analytics, session replay, and error monitoring — to measure product usage and diagnose errors.
– Payment processors — to handle billing and subscription management for paying customers.
– AI assistant platforms — when you choose to connect Fintent to an AI assistant, to enable that integration (see “Fintent AI Assistant Integrations”).
Each sub-processor is contractually required to process personal information only on Fintent’s instructions and to maintain appropriate administrative, technical, and physical security safeguards. A current list of our primary sub-processors is available on request at [email protected], and we may update that list from time to time.
Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal requests and safety. We may disclose personal information to law enforcement, government authorities, courts, regulators, or other third parties when we believe in good faith that disclosure is reasonably necessary to: (i) comply with a subpoena, court order, warrant, or other legal process; (ii) enforce our Terms of Service or other agreements; (iii) investigate, prevent, or address fraud, security, or technical issues; or (iv) protect the rights, property, or safety of Fintent, our users, or the public.
With your consent. We may share your information for any other purpose with your explicit consent.
In Short: Fintent can be connected to AI assistants such as Anthropic’s Claude via the Model Context Protocol. When you use Fintent through an AI assistant, your requests and our responses pass through that assistant’s infrastructure and are subject to that provider’s privacy practices, which we do not control.
Fintent offers a remote Model Context Protocol (“MCP”) server that allows third-party AI assistants to query Fintent signals on your behalf. If you choose to connect Fintent to an AI assistant:
– Data flow through the AI provider. The queries you send through the AI assistant (for example, a list of company domains, a request for screener signals, or natural-language prompts that the assistant translates into Fintent API calls) pass through that AI provider’s infrastructure before reaching Fintent. Fintent’s responses — including intent scores, topics, and screener data — pass back through the AI provider’s infrastructure on their way to you.
– AI provider’s privacy practices. The AI provider processes this data in accordance with its own privacy policy, data handling, and retention practices, which Fintent does not control. You are responsible for reviewing the AI provider’s terms and privacy policy before connecting Fintent, and for ensuring that connecting Fintent is appropriate for your use case.
– What Fintent logs. Fintent logs the fact that an MCP request was made, the parameters of the request, and the response, under the same terms described in the “Information collected through the Fintent API and AI Assistant Integrations” subsection of Section 1.
– Credential handling. Fintent does not share your account password or your API keys with any AI provider. For OAuth-based integrations, only a scoped OAuth access token (and, where applicable, a refresh token) is shared with the AI provider, strictly as required for the integration to function. You can revoke that token at any time from your Fintent account settings or from the AI assistant’s connector management interface.
– Disconnecting. You may disconnect an AI assistant integration at any time. Revoking access stops future requests but does not delete logs of prior requests, which are retained under our standard retention schedule (Section 6).
If you have questions about a specific AI provider’s handling of data routed through the Fintent MCP, please refer to that provider’s privacy policy or contact us at [email protected].
In Short: We use cookies and similar technologies on our website and web application to keep you signed in, remember preferences, measure how the Services are used, and (with your consent where required) support marketing. Our API and MCP endpoints use only the cookies strictly necessary for authentication.
Fintent and selected service providers use cookies, local storage, pixels, and similar tracking technologies (collectively, “cookies”) when you visit our marketing website (fintent.ai) and when you use the Fintent web application (app.fintent.ai). We use these technologies for the following purposes:
- Strictly necessary cookies — required for the Services to function, including session cookies that keep you signed in and cookies used for load balancing and security.
- Preference cookies — to remember your settings and preferences so you don’t have to reconfigure them each visit.
- Analytics cookies — to understand how visitors and users interact with the Services (for example, which pages are visited, referral sources, session duration, feature usage). We use these insights to improve the Services.
- Marketing cookies — where permitted by applicable law and, where required, with your consent, to measure the effectiveness of our marketing and to support advertising on third-party platforms.
We work with third-party providers that may set cookies on our Services, including web analytics and marketing tools such as Google Analytics and HubSpot. These providers may collect information about your use of the Services over time and across other websites.
Our Public API (app.fintent.ai/api/v2/public/*) and MCP server (app.fintent.ai/api/v2/mcp) do not rely on browser cookies for programmatic access; authentication is handled via Bearer API keys or OAuth 2.0 access tokens as described in our API documentation. Any cookies set on these endpoints are limited to those strictly necessary for authentication and session management.
You can control cookies through your browser settings and, where presented, through the cookie preferences banner or cookie settings link on our website. Disabling strictly necessary cookies will affect core functionality (for example, you will not be able to stay signed in). Disabling non-essential cookies will not prevent you from using the core features of the Services.
Do-Not-Track signals. Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
| Category | Examples | Collected |
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
B. Personal information categories listed in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
C. Protected classification characteristics under California or federal law | Gender and date of birth | NO |
D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
E. Biometric information | Fingerprints and voiceprints | NO |
F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
G. Geolocation data | Device location | NO |
H. Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
I. Professional or employment-related information | Business contact details in order to provide you our services at a business level or job title, work history, and professional qualifications if you apply for a job with us | YES |
J. Education Information | Student records and directory information | NO |
K. Inferences drawn from other personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | NO |
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- whether we collect and use your personal information;
- the categories of personal information that we collect;
- the purposes for which the collected personal information is used;
- whether we sell your personal information to third parties;
- the categories of personal information that we sold or disclosed for a business purpose;
- the categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
- the business or commercial purpose for collecting or selling personal information.
- You may object to the processing of your personal information.
- You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
- You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
- You may request to opt out from future selling of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.