Privacy Policy
Last Updated: February 26, 2026
1. Introduction
Finby (the "Company") is committed to protecting the privacy and security of personal information processed in connection with our identity verification and background check services. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you access or use our services, website, APIs, or related offerings (collectively, the "Services"). By using the Services, you acknowledge and agree to the practices described in this Privacy Policy.
2. Scope of This Policy
This Privacy Policy applies to information processed by the Company as an identity verification platform providing background checks, employment verification, and education verification for businesses and individuals. It should be read in conjunction with the Company Terms of Service.
3. Information We Collect
3.1 Personal Information
- Name, email address, and phone number
- Date of birth and government ID information
- Employment and education history
- Address and location information
3.2 Usage and Technical Information
- IP addresses and device information
- Browser type and version
- Date and time of service usage
- Pages visited and actions taken
3.3 Verification Data
- Verification requests and results
- Background check records
- Identity confirmation status
- Timestamps associated with verification attempts
4. How We Use Information
The Company uses collected information for the following purposes:
- To provide and maintain our identity verification services
- To process and complete identity verifications and background checks
- To manage accounts, billing, and customer support
- To detect, prevent, and investigate fraud, abuse, or security incidents
- To monitor compliance with our Terms of Service
- To improve service performance, reliability, and security
- To comply with applicable legal, regulatory, and contractual obligations
5. Legal Bases for Processing
Where required by law, the Company processes personal information based on one or more of the following legal bases: performance of a contract, compliance with legal obligations, legitimate business interests (including fraud prevention and security), and consent where applicable.
6. Disclosure of Information
The Company does not sell or rent personal information. We may disclose information only in the following circumstances:
- With service providers and subprocessors that assist with SMS delivery, hosting, analytics, security, or support
- With telecommunications carriers and aggregators as required to deliver SMS messages
- To comply with law, regulation, legal process, or governmental requests
- To protect the rights, property, or safety of the Company, users, or others
- In connection with a merger, acquisition, financing, or sale of assets
No mobile information is shared or sold for marketing or promotional purposes.
7. SMS Communications and Consent
The Company sends SMS messages solely for identity verification and security notification purposes. Text messaging originator opt-in data and consent records are collected and stored securely and are not shared with third parties except as required to provide the Services or comply with law.
Users may opt out of any non-essential communications by replying STOP to applicable messages or by contacting support@finby.org.
8. Data Retention
The Company retains personal and verification data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud or abuse. Retention periods vary depending on data type and legal requirements.
9. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, monitoring, and periodic security assessments. Despite these measures, no method of transmission or storage is completely secure.
10. Your Rights and Choices
Depending on your jurisdiction, you may have rights regarding your personal information, including the rights to access, correct, delete, restrict, or request portability of your data. Requests may be submitted using the contact information below.
11. Children's Privacy
The Services are not intended for individuals under the age of 18. The Company does not knowingly collect personal information from children and will delete such information if discovered.
12. International Data Transfers
The Company operates primarily from the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States or other jurisdictions.
13. Compliance with Privacy Laws
The Company complies with applicable data protection laws, including the GDPR, CCPA/CPRA, and other U.S. state privacy laws, as applicable to our role as a service provider.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be posted with an updated "Last Updated" date.
15. Contact Information
Finby
Email: support@finby.org