Privacy Policy

Finareto operates the Finareto project management platform (the “Service”). This policy explains what information the Service collects, how it is used, and the choices available to users.

When you use Finareto, you or your organization may enter information such as:

• Name, email address and profile information
• Project information, phases, work items and progress records
• Companies, subcontractors, workers and equipment
• Daily logs, issues, notes and project photos or files
• Offers, costs and payment information

Finareto stores these as project-management records entered by users, so that they can be organised, displayed and reported back to authorised members of the relevant project.

Finareto supports signing in with an email address and password, and with Google sign-in where enabled. Authentication is handled using Supabase Auth. Finareto does not store your Google account password — Google authenticates you directly, and Finareto only receives confirmation that you signed in successfully together with the profile information described below.

When you choose “Continue with Google”, Finareto may receive basic profile information made available by Google, such as your email address, name, and a basic profile identifier or avatar where applicable. Finareto uses this information only for authentication and account setup, unless a future feature makes a different use explicit and asks for your consent. Finareto does not request or access your Gmail, Drive, contacts, calendar, or any other Google data.

Information collected through the Service is used to:

• Provide and operate the platform
• Authenticate users and manage sign-in
• Manage project access and invitations
• Store and display project records to authorised users
• Generate reports and exports that you request
• Maintain security and prevent abuse
• Troubleshoot issues and improve reliability
• Send transactional emails (e.g. invitations, notifications about your account or projects)

Finareto relies on a small number of infrastructure and service providers to operate the Service, currently including Supabase (database, authentication and storage), Vercel (application hosting), Mailgun (transactional email delivery), Google (authentication / Google OAuth), and Cloudflare Turnstile (bot and abuse protection on sign-in forms). These providers process data only as necessary to deliver their part of the Service.

Finareto uses:

• Authentication and session cookies, to keep you signed in
• Local storage for interface preferences, such as your chosen theme
• Security technologies necessary for login and session handling

Finareto does not use advertising or third-party tracking cookies.

Finareto does not sell personal or project data. Information may be processed by the infrastructure and service providers listed above, to the extent necessary to deliver the Service, and may be disclosed where required by law.

Project information may be visible to other users who have been granted access to the same project, according to their assigned role and permissions. Project owners and administrators control who has access to a given project.

Information is retained for as long as it is required to provide the Service. Data may also remain stored for a period afterwards for backup, security, legal or operational purposes where appropriate. Where the platform's functionality permits, project owners and administrators may archive or delete project data. Finareto does not currently commit to specific retention periods beyond this.

Depending on where you are located, you may have rights over your personal information, which can include the right to:

• Access the personal information held about you
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to certain processing, where applicable
• Receive a copy of your information in a portable format, where applicable

To exercise any of these rights, contact us using the details below.

Finareto uses reasonable technical and organisational safeguards designed to protect the information in its care. No online service can guarantee absolute security, and Finareto cannot guarantee that information will never be accessed, disclosed, altered or destroyed in a manner inconsistent with this policy.

Finareto is intended for professional and project-management use and is not directed at, or intended for use by, children.

This policy may be updated from time to time. When it is, the “Last updated” date at the top of this page will change accordingly.

Questions about this policy, or requests relating to your information, can be sent to privacy@finareto.com.