Privacy Policy

Effective Date: June 22, 2026 · FinVerified, Inc.

Summary: FinVerified does not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use protected health information to train AI models.

1. About FinVerified

FinVerified, Inc. is a Delaware corporation providing a Payment Pathway Compliance™ SaaS platform to dental and medical practices, DSOs, MSOs, and lender partners. We help healthcare providers manage compliance obligations related to patient financing, payment, and payment processing operations. FinVerified does not provide, manage, or facilitate patient financing.

2. Information We Collect

2.1 Directly Provided

Account registration: name, email, job title, organization, phone
Contact forms: name, email, message
Platform use: compliance questionnaire responses, uploaded documents
Payment: billing name, address, card details (processed by Stripe — we do not store card numbers)

2.2 Collected Automatically

Pages visited, features used, session duration
IP address, browser type, OS, device identifiers
Server logs, error logs, API request logs

2.3 Protected Health Information (PHI)

We may process limited PHI as a HIPAA Business Associate under a signed BAA. We do not use PHI to train AI models, sell PHI, or disclose PHI except as required by law or our BAA.

3. How We Use Your Information

Purpose	Legal Basis
Providing and operating the Platform	Contract performance
Processing payments	Contract performance
Customer support	Legitimate interest
Transactional messages	Contract performance
Marketing (with opt-out)	Legitimate interest / consent
Security and fraud prevention	Legitimate interest / legal obligation
OFAC/SAM.gov sanctions screening	Legal obligation

4. How We Share Your Information

We do not sell your personal information. We do not share for cross-context behavioral advertising.

Subprocessor	Purpose	Location
Amazon Web Services	Cloud hosting	United States
Anthropic (via AWS Bedrock)	AI compliance analysis	United States
Stripe	Payment processing	United States
Google Workspace	Internal communications	United States
Telnyx	SMS communications	United States
Railway	Application deployment	United States

5. SMS Communications

Reply STOP to opt out. Reply HELP for help. We do not sell your mobile number. Msg & data rates may apply. See our SMS Terms.

6. Data Retention

Data Type	Retention
Account data	Account term + 3 years
Compliance records	7 years
Payment records	7 years
PHI under BAA	Per BAA / HIPAA requirements

7. Your Privacy Rights

You may request access, correction, deletion, or portability of your personal information. California residents have full CCPA/CPRA rights. We honor all verifiable requests regardless of state. Contact: privacy@finverified.ai with subject "Privacy Request."

8. Security

We use TLS 1.2+ encryption in transit, AES-256 at rest, MFA, role-based access, and HIPAA-compliant infrastructure. We notify affected users of breaches as required by law.

9. Children

The Platform is not directed to children under 13. Contact us at privacy@finverified.ai to report any such data.

10. Changes

Material changes will be communicated 30 days before taking effect via email or Site notice.

11. Contact

FinVerified, Inc.

Privacy: privacy@finverified.ai

Registered Agent: Northwest Registered Agent Service, Inc., 8 The Green Ste B, Dover, DE 19901