Who processes data
Fintaro is a management accounting service operated by TOPADMIN LLC (ТОВ «ТОПАДМІН»). For data it collects from account owners, representatives and users for its own purposes, the Operator acts as the personal-data controller.
For information that customers place in their workspaces, including client contacts, invoices and financial records, the customer generally determines the purposes and lawful basis of processing. Fintaro processes such data to provide the service on the customer's behalf; the exact legal roles depend on the circumstances.
Contact support in your workspace for privacy requests; official Operator contact details should be published in the service-provider information.
Categories of information
Depending on usage, we may process names, companies, email addresses, roles, preferences, IP addresses, login times, technical logs, plan information, invoice and payment statuses, and support requests.
Customers may enter counterparties, invoices, wallets, payments, expenses, reports and comments. Customers determine the information they upload; particularly sensitive personal information unrelated to service use is not required.
Full card details entered on an external payment provider's page are processed by that provider. The Operator may receive a transaction identifier, amount and status.
Purposes and legal grounds
Processing enables registration, authentication, isolated workspaces, invoicing, financial features, notifications, support, subscription billing, security, fraud prevention and legal compliance.
Grounds may include contract performance, statutory obligations, legitimate interests where allowed, and consent where necessary. Customers entering other people's data must establish their own lawful basis and inform them where required.
Financial and business confidentiality
Balances, invoices, payments, clients, categories and reports may be commercially sensitive. We do not sell them to advertisers or publish them. Access should be limited to authorized users, technical processes and staff under applicable terms and law.
No information system is completely immune to security incidents. Relevant risks and responsibilities are also described in the Public Offer; data-protection obligations still apply.
Who may receive data
Where necessary, information may be shared with hosting and backup providers, email services, customer-selected gateways such as Monobank, LiqPay and Cryptomus, authentication providers and technical contractors.
Disclosure may also be required by applicable law or a lawful request from a competent authority. Only necessary information is shared; third-party services may have separate privacy terms.
Processing locations and international transfers
Information may be processed wherever the infrastructure and engaged providers operate. Actual countries depend on the Operator's current configuration. International transfers must comply with applicable legal grounds and safeguards.
We make no unverified claim about a particular data center or storage country. Relevant details can be provided in response to an appropriate lawful request.
Access and cybersecurity
Fintaro uses authentication, access separation and logs; customer companies have separate workspaces and databases. Particular security settings, password storage, backup and update arrangements depend on the current deployment.
Users should use strong unique passwords, secure email accounts, avoid sharing login codes, revoke former employees' access and report suspicious activity. The Operator's legal duties are not shifted to users.
Retention and deletion
Account and workspace data are generally processed while the contractual relationship continues. Afterwards, information may remain for legal obligations, accounting, disputes, security and the normal backup-deletion cycle.
Request account closure or deletion via support. The Operator may verify identity and authority. Data legally required to be retained cannot be deleted early; technical deletion and backup periods depend on infrastructure settings.
Rights of individuals
Under Ukrainian law, individuals may request information about the sources, purposes and scope of processing, correction of inaccuracies, reasoned objection, deletion of unlawfully processed data, withdrawal of consent when applicable, and complaints to Ukraine's Parliament Commissioner for Human Rights or a court.
Send requests through support with sufficient verification details. If a customer company controls the relevant data, we may forward the request or help fulfil it on that company's instructions.
Artificial intelligence in development
AI tools have been used in Fintaro software development and supporting materials. This does not mean customer financial data are automatically transferred to external AI providers. Future processing of real customer data through an external AI system would require a lawful basis, risk assessment and notice where necessary.
Security incident response
If an incident is reasonably suspected, the Operator arranges investigation, containment, recovery and notifications in the cases and deadlines required by law. Customers should promptly report suspected unauthorized access and secure their accounts and devices.
Updates to this Policy
The Operator may amend this Policy as technology, contractors or legal requirements change. A revised version is published here, with appropriate notice of material changes affecting users' rights. Separate consent will be obtained before any new processing that legally requires it.
Contact and related documents
Operator: TOPADMIN LLC (ТОВ «ТОПАДМІН»), trading as Fintaro. Use workspace support or the Operator's published official contacts for privacy questions. See also the Public Offer and Refund Policy.