Privacy Policy

Last updated: April 16, 2026

Who We Are

FinlyFetch is a product of WholesaleBridge LLC ("we," "us," "our"), a Wisconsin limited liability company. FinlyFetch provides STR (short-term rental) financial operations middleware at finlyfetch.io. HostClear (hostclear.io) is our companion product for accountants and CPAs.

What We Collect

We collect only what's necessary to provide our service:

  • Waitlist signup: Your email address, collected via our waitlist form. Used solely to notify you when FinlyFetch launches. Not shared with third parties.
  • Account information: When the product launches — name, email, organization name, property details you provide during onboarding.
  • Financial data: Bank transaction data (via Plaid), receipts and documents you upload or forward, revenue data from PMS integrations, and contractor payment records. This data is processed to provide our core service.
  • Usage data: Standard web analytics (page views, feature usage) to improve the product. No advertising trackers.

How We Use Your Data

  • To provide, maintain, and improve FinlyFetch services
  • To classify expenses, reconcile bank transactions, and generate financial reports
  • To send SMS notifications via Twilio (only if you opt in)
  • To prepare tax-related documents (1099-NEC, W-9) at your explicit direction
  • To communicate product updates and support responses

We do not sell your data. We do not use your financial data for advertising. We do not share your data with third parties except as required to provide the service (e.g., Stripe for payments, Plaid for bank connections, TaxBandits for tax filing at your direction).

How We Protect Your Data

  • Encryption at rest: Sensitive data (TINs, API keys, OAuth tokens) is encrypted using Supabase Vault (pgsodium). Never stored in plain text.
  • Encryption in transit: All connections use TLS. No exceptions.
  • Access control: Row-level security on every database table. Organization isolation enforced at the database level via JWT verification.
  • Audit trail: Every financial operation is logged with an immutable audit record.
  • No PCI scope: We never see or store credit card numbers. Stripe handles all payment card data.

Data Retention

  • Financial records: 7 years (IRS minimum retention requirement)
  • Receipts and documents: 7 years, tied to financial records
  • W-9 documents: 4 years after last filing year
  • Audit events: 7 years
  • Webhook payloads: 90 days
  • Waitlist emails: Until launch, then deleted unless you create an account

Third-Party Services

FinlyFetch integrates with the following services to provide our product:

  • Supabase — Database and authentication
  • Stripe — Payment processing (Connect, Treasury, Identity)
  • Plaid — Bank account linking and transaction data
  • Twilio — SMS communications
  • Google Document AI — Receipt and document OCR
  • Anthropic (Claude API) — AI expense classification
  • TaxBandits — 1099-NEC preparation and W-9 collection
  • Resend — Transactional email
  • Vercel — Website hosting

Each service processes only the data necessary for its function. We do not send your complete financial profile to any single third party.

Your Rights

  • Access: Request a copy of your data at any time.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and associated data, subject to legal retention requirements (e.g., IRS 7-year rule for financial records).
  • Export: Download your financial data in standard formats (CSV, PDF).
  • Opt out: Unsubscribe from marketing communications at any time. Service communications (security alerts, billing) cannot be opted out of while your account is active.

Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Analytics, if implemented, will use privacy-respecting tools that do not track individuals across sites.

Children's Privacy

FinlyFetch is not intended for use by anyone under 18. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy as our product evolves. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy or your data? Email us at privacy@finlyfetch.io

WholesaleBridge LLC
Mt Pleasant, Wisconsin