Privacy Policy
What FINMOZG stores, where it lives, who can see it, and what you can ask us to do with it. Last updated October 22, 2026.
Who we are
FINMOZG is developed and operated by INNOVA CONSULT LTD., a federal corporation in Ottawa, Ontario, Canada (corporation number 1522612-1). INNOVA CONSULT LTD. is responsible for the personal information described here.
What we store
- Your account: name, email address and your password as a bcrypt hash. The plain password is never stored.
- Your company's finance data: what you enter or import into the platform, such as bank statements, transactions, ledger entries, documents, employees and payroll runs, tax reports and the audit log of actions.
- Bank connections: if you connect a bank that offers an API, we store its access token encrypted with AES-256-GCM under a dedicated server key. The token is never sent back to the browser.
- Demo requests: what you type into the contact form (name, company, work email, phone, country, company details and message).
- Bug reports you send through the feedback button.
Where it is hosted
The platform and its PostgreSQL database run on our server in a European Union data centre (hosting provider Contabo). Traffic to finmozg.com is encrypted with TLS. A database backup is made every night and kept on the server.
Who can see it
Users of your company see its data within their role; membership and role are re-checked on the server for every request. Platform administrators of INNOVA CONSULT LTD. have technical access to the database for operations and support. We do not sell your data or share it with advertisers.
Where data leaves our server
- Email notifications. When you sign up, request a demo or report a bug, a notice with the details you entered is emailed to our team through our email provider, Resend.
- Website analytics. The public pages of finmozg.com use Google Analytics 4 only after you accept analytics cookies in the banner.
- AI. AI agent runs are switched off in the public environment during early access, so no company data is sent to an AI provider. This policy will name the provider before that changes.
- Your bank. If you connect a bank, we exchange data with that bank's own API to import your transactions.
Cookies
We use a session cookie to keep you signed in and, after your consent, Google Analytics cookies on the public pages.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account and company data. Write to us through the contact form or at security@finmozg.com. Residents of Canada have rights under PIPEDA, and residents of the EU and UK under the GDPR.
Changes
When this policy changes, we update the date at the top of this page. The security page describes the technical controls in more detail.