Effective date: June 15, 2026

Finology stores the following data inputs.

Personally Identifiable Information Collected from Advisors

Finology collects Personally Identifiable Information from Advisors such as:

• User’s IP address
• Full Name
• Physical address
• Email address
• Credit card information
• Phone number
• Information regarding the professional certifications
• Website and business information

Personally Identifiable Information Collected from Borrowers

Finology collects PII data either from Borrowers directly or supplied by a Financial Advisor:

• User’s IP address
• Full Name
• Family and Dependent information
• Salary and income
• Expenses information
• Loan Data
• Physical address
• Email address
• Tax ID number
• Phone number
• Gender
• Demographic information

Reasons for Collection

The main reasons why Finology may collect that information are as follow:

• To use the product (e.g. to sign in)
• To promote the use of services
• To measure the use of the website and improve the content
• To bill and collect money
• To investigate, prevent, or take action regarding illegal activities or suspected fraud
• To send any email messages (e.g. system alerts or new bargains), including providing customer support
• To enforce compliance with SaaS Terms of Service or applicable law as well as to meet legal requirements
• To connect financial advisors to potential clients

Publicly Available Information on Financial Advisors

Publicly Available Information on Financial Advisors for purposes of selection by Users. Some of the information You provide may be public once opted in. Financial advisors supply details on their respective businesses/firms within the select/find an advisor tool so they may be searchable to borrowers on an opt-in basis. You (End User) can have an advisor profile under the advisor’s name not firm name. Your advisors can ID and backlink their own websites with DBA’s and firm name. These advisors opt in within the Finology platform to enable this feature.

Third Parties

Finology may link to, or link from, third party websites that are not maintained or affiliated with Finology. Finology does not endorse, guarantee or make any representations or warranties with regard to any other website or content posted therefrom. While Finology tries to keep both Finology and the third-party-provided information current and accurate, we cannot guarantee and expressly do not warrant that any 3rd party Application Programming Data or "API" data, content, functions, information and tools are error-free. By linking to these sites and technologies, Finology does not represent or imply that there is any business relationship between the two entities. Finology is not responsible for the content and performance of these sites or for your transactions with them.

Data Retention and Deletion

We retain personal information for as long as Your account is active and for as long as reasonably needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Inactive and lapsed accounts. If an account becomes inactive, or a subscription lapses and is not renewed, we will notify the account holder and provide a period of at least 60 days, during which we send reminder communications, for the account holder to reactivate before the account and its associated data are permanently deleted.

What deletion does. When an account is deleted, we delete or de-identify the personal information associated with it. Information the account exclusively owns, such as client records, loan data, scenarios, and reports, is deleted. Client records that have been shared with another advisor are retained so that the other advisor keeps access to their own client relationship. We keep a limited, non-identifying record that a deletion occurred for audit and compliance purposes.

Requesting deletion. You may request deletion of Your account and personal information at any time by contacting us at info@finology.tech. Where a borrower’s information is connected to an advisor, we will handle the request consistent with that relationship and with applicable law.

Information we may retain. Even after deletion, we may retain certain information where required by law or for legitimate business purposes, for example, billing and tax records, records needed to prevent fraud or resolve disputes, and information we are legally required to keep, for the period required, after which it is deleted or de-identified.

Your Privacy Rights

Depending on where You live, You may have rights regarding Your personal information, including the right to:

• access the personal information we hold about You;
• request correction of inaccurate personal information;
• request deletion of Your personal information (subject to the retention exceptions described above);
• where we sell or share personal information as those terms are defined under applicable law, opt out of that sale or sharing; and
• not receive discriminatory treatment for exercising these rights.

To exercise any of these rights, contact us at info@finology.tech. We will verify and respond to Your request within the time required by applicable law. Where Your personal information was provided to us by a financial advisor, we may coordinate with, or direct the request to, that advisor, consistent with applicable law.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of Your account credentials and for activity that occurs under Your account.

Direct all questions regarding this Privacy Policy to Finology’s email address info@finology.tech.