Privacy Policy

The data controller is FINQUP Technology OOD (UIC 207033081), 37 Georgi Benkovski Str., main entrance, 1st floor, Oborishte District, Sofia 1000, Republic of Bulgaria. It is the same company that runs genesisbox.org. Research and development is carried out by FinqUP Technology DOO, Kavadarci, North Macedonia, which processes data only on our instructions.

For anything in this policy, including exercising your rights, write to info@finqup.com.

Mail, documents, customer records, meetings, prompts, model outputs and everything else you work on with a Clerk Station are processed and stored on that machine. Clerk OS does not send your content or usage data to us, and we have no remote access to a station unless you grant it for a specific support session.

Actions that by their nature use the internet — sending an email, syncing a mailbox you connected — go directly from your station to the service you chose, not through us.

• Reservations: first and last name, company, email, phone, the build and quantity you chose, and any message, plus a one-time email verification code. We use it to verify your email, hold your place and founding discount, and contact you about configuration, price and delivery. Legal basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).
• Contact form: name, email, company, phone and your message, to answer you. Legal basis: our legitimate interest in replying to enquiries, or pre-contractual steps (Art. 6(1)(f) and (b)).
• Hosted Clerk OS workspaces: account details and the content you connect — mailboxes (IMAP/SMTP), documents and calendars — processed to provide the service you signed up for, including building a private search index of your documents. Messages are only sent on your instruction. Legal basis: performance of a contract (Art. 6(1)(b)).
• Technical logs: IP address, browser type and request times, kept briefly to secure and operate the site. Legal basis: legitimate interest in security (Art. 6(1)(f)).
• Support: only what you choose to share with us when you ask for help.

• We do not sell or rent personal data.
• We do not use advertising trackers or third-party analytics on this website.
• We never use customer data to train public, foundation or third-party models.
• Custom models for enterprise customers are fine-tuned only under a written agreement, on the customer’s own hardware, and the resulting model belongs to the customer.

• Google Cloud — hosting of finqup.com and hosted workspaces in the Frankfurt, Germany region, and document, image and audio processing for hosted workspaces.
• A specialised AI inference provider — runs the agents in hosted workspaces. It receives the messages and context of each agent request to produce the answer. Hosted-workspace users are told which provider inside the workspace.
• Google Workspace — our email, including reservation confirmations.

Each acts under a data processing agreement. Where a processor handles data outside the EU, including in the United States, the transfer is covered by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

None of this applies to a Clerk Station: its models run on the machine itself.

• Reservations: until your order is completed or the reservation is cancelled. Reservations that do not become orders are deleted within 24 months of our last contact with you.
• Orders: order and delivery records for up to 5 years; invoices and payment records for 10 years, as Bulgarian accounting law requires.
• Contact enquiries: up to 24 months after the conversation ends.
• Hosted workspaces: while your account is active, and deleted within 30 days of closure.
• Technical logs: up to 90 days.

You may ask for access to your data, correction, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time. We answer within one month.

You may also complain to the Commission for Personal Data Protection (CPDP), Sofia, Bulgaria (cpdp.bg), or the supervisory authority where you live or work.

FinqUP operates an information security management system certified to ISO/IEC 27001. Traffic to finqup.com is encrypted in transit, credentials and connection secrets are stored encrypted, and access to production systems is limited to the people who need it.

Our products are for businesses and adults. We do not knowingly collect data from anyone under 16.

If we change this policy we will update the date above, and tell reservation holders and account holders by email about material changes.