Privacy Policy

What Finteco.pro collects, why, who else sees it, and the choices you have.

Draft — not yet reviewed by legal counsel. This policy describes how the site actually works today, but before relying on it the operator still needs to:

add the legal name and address of the operating entity (none is established yet);
add a working contact address for privacy requests;
confirm the legal bases, retention periods and international-transfer wording with counsel.

Last updated: 19 September 2026

1. Who we are

Finteco.pro (“we”, “us”) provides compliance tools and resources: sanctions and PEP screening, Know-Your-Partner (KYP) due-diligence records, a regulatory news page and a list of useful registers. An operating legal entity has not yet been established; this policy will name it once it is.

2. What we collect

Account details. Your email address, the date you registered, and your password stored only as a salted one-way hash — we cannot read or recover it. To make sure an address belongs to the person signing up, we email it a confirmation link; we keep only a one-way fingerprint of each link, not the link itself. If you ask to reset your password, we do the same with a reset link.
Content you save. KYP records, templates, submissions and any branding (such as a logo) you upload. These are stored against your account and are visible only to it.
Documents you upload for a Document check. The text of each document (Word, PDF or text file) and the results of the check, including the user marks you make. We keep the extracted text, not the original file. They are stored against your account and are visible only to it. Such documents can contain confidential business information and personal data: upload only documents you are entitled to share.
A login cookie. One cookie that keeps you signed in, for up to 30 days. It is strictly necessary for the tools to work. We use no advertising or analytics cookies, and no analytics or tracking scripts.
Screening searches. The names and terms you type into the screening tool are used to produce your results and are not saved to your account or to a database. However, they can appear in the server’s technical logs, which we use to diagnose faults (see “Retention”).
Technical data. As with any website, your IP address and basic request details are handled by our hosting provider when you use the site.

Browsing the public pages (Home, Services, Registers, News, About, Vacancies, this policy and the Terms) does not require an account.

3. Searches that leave our server

Most screening sources are stored on our server and searched there. Some sources are queried live instead. For those, the name or term you enter is sent on to the relevant public register or database (for example Interpol, the UK sanctions list service, Wikidata or ICIJ Offshore Leaks) so it can look for a match. Each of those services has its own privacy practices, which we don’t control.

4. Services we rely on

Render hosts the site and stores its data (accounts, saved records). Servers may be located outside your country.
GoDaddy provides the finteco.pro domain and DNS.
Resend sends our account emails (confirmation and password-reset links). It receives your email address and the message we send you, and processes them on our behalf.
Google Fonts. Our pages load their typefaces directly from Google, so Google receives your IP address when a page loads.
Anthropic provides the AI model that reads documents in the Document check. The text of a document you check is sent to Anthropic’s API, together with the obligations it is checked against, only to produce your results. Servers may be located outside your country. Document creation does not use AI and sends nothing to Anthropic.
cdnjs (Cloudflare). The screening and KYP pages load an open-source PDF library from this content-delivery network to build reports.

News pictures. The News page is assembled on our server from publishers’ public feeds, but its preview pictures are loaded by your browser directly from the publishers’ own servers (for example Finextra, Finance Magnates, The Paypers or a regulator). Those publishers can therefore see your IP address and browser details when the page loads. We ask your browser not to send them the page address as a referrer, and we use no cookies or trackers for this. Each publisher’s own privacy policy applies to what it does with that request.

5. How we use your information, and why

To create and secure your account and keep you signed in — necessary to provide the service you asked for.
To run the screening and KYP tools and store your saved records — necessary to provide the service.
To run the Document check and Document creation tools and store your checks — necessary to provide the service.
To keep the service secure, prevent abuse and find and fix faults — our legitimate interest.
To confirm your email address and to let you reset a forgotten password — necessary to provide the service, and our legitimate interest in keeping accounts secure.
To contact you about your account, if that becomes necessary — necessary to provide the service.

We do not sell personal data, and we do not use it for advertising or profiling.

6. Information about other people

Screening and KYP records involve information about third parties — the people and companies you check or record. You decide what to search and save, so you are responsible for having a lawful basis to do so and for handling the results properly. On our side, we process that information only to return your results and to store and show your own saved records back to you.

7. Retention

Account and saved records: kept while your account is active. KYP records are kept until you delete them or ask us to delete your account.
Document checks: kept until you delete them (the Delete button on a check removes its documents’ text and results at once), and removed automatically after 90 days without activity.
Sign-ups you never confirm: if you ask for a confirmation link but don’t use it within 24 hours, the sign-up is cancelled and the email address is deleted (within about an hour after the link expires). You can sign up again with the same address at any time.
Confirmation and reset links: work once and expire (24 hours for confirmation, 1 hour for password reset).
Login sessions: expire after 30 days, and are all ended when you reset your password.
Server logs: short-lived technical logs held by our hosting provider under its own retention rules; they may contain search terms and are not used for any other purpose.

8. Security

Passwords are hashed before storage, a new account only works once its email address has been confirmed, the site is served over HTTPS, and saved records are restricted to the account that created them. No online service can promise perfect security, so please use a strong, unique password and keep it private.

9. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and complain to your local data-protection authority. There is currently no self-service “delete my account” button — to exercise any of these rights, contact us and we will act on the request.

10. Children

The service is for compliance professionals and is not intended for anyone under 18.

11. Changes to this policy

When we change this policy we will update the date at the top. If a change is significant we will make that clear on the site.

12. Contact

A dedicated privacy contact address will be published here — see the notice at the top of this page.