Privacy Policy

This Privacy Policy explains how Nikita Samartsev, operating as Filarise, in Fredericton, New Brunswick, Canada ("Filarise", "we", "us", or "our"), handles personal information when you use our website and services (the "Service").

Bank access and sharing with an AI client require your authorization. Creating an account does not, by itself, authorize those connections or unrelated uses of your financial information.

1. Information we collect and how we collect it

We collect information from you, your use of the Service, and the bank or sign-in services you authorize.

Financial information is sensitive and may reveal personal activities. We collect information needed for the purposes below and the features you choose to use.

2. How we use information

We use personal information to manage accounts and subscriptions, synchronize financial information, and provide it to an AI client you authorize.

We also use information for support, product improvement, security, and administration of usage limits, and to send necessary service communications.

We may use information to meet legal obligations and address legal claims. We obtain additional consent before a new use where required by law.

3. Bank connections

Bank connectivity is provided through Plaid. The connection flow explains the access requested. We receive and synchronize information through the connection you authorize.

Plaid and your bank also handle information under their own privacy notices, including Plaid's End User Privacy Policy.

You can disconnect a bank through your account or contact us for help. This ends access and future synchronization through that connection. Previously collected information remains subject to the retention and deletion rules below.

Limited connection-history records may be retained to administer connection limits and prevent abuse.

4. Sharing with your AI client

When you authorize an AI client, we provide financial information it requests within your connection permissions.

The AI provider handles that information under its own privacy practices, including retention and model training. Review them before connecting. Filarise does not operate that client or generate its answers.

Filarise does not retain the contents of MCP requests and responses. Technical and usage records may be retained for operation, security, and support.

Revoking a connection stops future access through it. To request deletion of information already received by the AI provider, contact that provider.

5. Cookies, analytics, and diagnostics

We use cookies and similar technologies to operate and secure the Service, remember preferences, understand how it is used, and improve its performance. Analytics and diagnostic services process technical and usage information, which may be associated with your account, to help us understand feature use and identify and resolve problems. We do not use session replay.

We obtain consent for these technologies and the related processing where required by applicable law. You may withdraw consent by contacting us or by choosing Cookies in the footer. Restricting technologies needed for sign-in or other essential functions may affect those functions.

6. Who receives information

We use providers for the following services:

Providers receive information needed for their services, subject to applicable privacy requirements. Some also process information independently under their own notices. We remain responsible for information under our control.

Within Filarise, access is limited to the operator and authorized personnel or contractors who need it to perform their duties.

We share information with the AI client you authorize. We may also disclose information for legal or security purposes, or in a business transaction, where permitted by law and subject to applicable protections.

7. Processing locations and protection

Filarise is operated from Canada. Our providers may process information outside your province or territory, including outside Quebec, and outside Canada, including in the United States. Information processed in another jurisdiction may be accessible to its courts, law-enforcement agencies, or other authorities under its laws.

Our application and primary database are hosted on AWS servers in Canada. This does not mean that all processing by our providers takes place in Canada.

We use safeguards appropriate to the sensitivity of information. No system offers absolute security.

We investigate privacy incidents, take measures to reduce harm, and notify affected individuals and authorities when required by law.

8. Retention

We retain information as needed for the purposes in this Policy and applicable legal requirements. Information no longer needed is deleted or anonymized where permitted by law.

Accounts and financial history

We maintain account and connected financial information to provide the Service and preserve history while your account is maintained.

If your account has no active subscription and remains inactive for 180 consecutive days, we delete the account and its connected banking information from the active database and clear personal profile information. The period begins on the later of the date your active subscription ends and your last signed-in use of the account. Signed-in use or activation of a subscription interrupts the period; background synchronization alone does not count as account activity.

This allows you to return with your stored history. You may request deletion sooner using the process below.

Cancelling a subscription or stopping synchronization does not itself delete stored information. Subscription access rules are described in our Terms.

Other records and backups

We retain limited billing and payment records separately for accounting, taxes, refunds, and disputes. Tax and accounting records are generally retained for six years after the end of the last tax year to which they relate, or longer where legally required. This does not require retention of your connected bank transaction history.

Usage, diagnostic, connection-history, and support records are retained as needed for their purposes. Records needed for an unresolved request, dispute, or legal obligation may remain until that purpose is completed. Contact us for information about retention applicable to your records.

Copies may remain in restricted backups after deletion from active systems and expire through backup rotation.

Backup copies are retained for a maximum of 30 days.

9. Account deletion

When you request account deletion, ordinary account access, MCP access, and bank synchronization are disabled, and subscription auto-renewal is cancelled. The account enters a seven-day pending-deletion period.

You may cancel deletion during this period by verifying your identity and explicitly restoring the account. Signing in alone does not cancel deletion, and restoration does not automatically authorize a new payment.

After seven days, banking information is deleted from active systems and personal profile information, including your profile email, is cleared. The limited records and backups described above may remain. Finalized deletion cannot be reversed.

Deletion requests extend to providers acting on our behalf as required by law. They do not automatically erase information independently held by your bank, payment provider, or AI provider.

10. Your choices and privacy rights

Manage connections and account deletion through your account, or contact us for help and privacy requests.

Under applicable law, you may request access to personal information we hold about you, correction of inaccurate information, information about its use and disclosure, withdrawal of consent, and deletion. Where applicable, you may also request eligible computerized information in a structured, commonly used format or its transfer to an authorized recipient. We explain any legal limits affecting a request.

Privacy requests do not require a paid subscription. Withdrawing consent may affect features that depend on that information; we explain those effects.

We may verify your identity using information reasonably necessary to protect your information. We respond within the period required by applicable law and explain any permitted extension, refusal, or charge. If a financial record originates from your institution, correction of the underlying record may need to be addressed with that institution.

Contact our privacy contact with concerns or complaints. We review and respond to them. You may also complain to the Office of the Privacy Commissioner of Canada or the provincial privacy authority with jurisdiction.

11. Eligibility

Filarise is offered to people who have reached the age of majority in their province or territory of residence, as described in our Terms. It is not intended for children to register or use independently. If an ineligible person has created an account, contact us so we can address the account and associated information.

12. Changes to this Policy

We update this Policy as our practices change and communicate amendments through appropriate notices. We provide advance notice of material changes where appropriate or legally required. Changes requiring additional consent apply only after that consent is obtained.

13. Contact

Operator and person responsible for privacy: Nikita Samartsev, operating as Filarise

Location: Fredericton, New Brunswick, Canada

Privacy contact email: support@filarise.com

Terms of Service: Terms of Service