Legal
Who else touches your data
Every company that holds or handles part of your data on our behalf, what each one is for, and where they are. We give 30 days' notice by email before this list changes.
Last updated
This draft has not been reviewed by a lawyer. It describes how finpo actually handles data today and is accurate to the software, but it has not been checked against the NDPA, the GDPR, or any other law it may need to satisfy. Please have it reviewed before relying on it.
Always
These are part of running the service. A business using finpo at all is using these.
| Who | What they do | Where |
|---|---|---|
| Hosting provider | Runs the servers and the database | Nigeria, or the region chosen at signup |
| Object storage | Holds photographs and exports, encrypted | Same region as the database |
| Email delivery | Sends sign-in codes, seals and alerts | EU |
| Flutterwave | Takes subscription payments | Nigeria |
Only if you switch it on
None of these are used unless you turn on the feature beside them. If you never do, your data never reaches them.
| Who | What they do | Where | When |
|---|---|---|---|
| Email provider | Sends alerts, sign-in codes and a shop’s emails to its own customers | EU / US | Only when email alerts or customer emails are on |
| OpenRouter | Answers playbook questions | US | Only when the AI add-on is on, and only for documents marked shareable |
What we do not do
We do not sell your data, and we do not hand it to anybody for advertising. Nothing you mark secret (a recipe, a formula, a costing) is sent to an AI provider, whether the AI add-on is on or off.
If you object to one of these
Write to us. Where a sub-processor is optional, the answer is usually to leave that feature off. Where it is not, we will tell you plainly rather than pretend there is a way around it.