Privacy Policy

Last updated: 15 September 2026

This policy explains what personal data we process when you visit fineguide.ai, write to us, book a demo, talk to the assistant on the site or use a Fineguide account: why we process it, who receives it, how long we keep it and what rights you have.

1. Who we are

The controller of your data is Opentech Consulting, str. 31 August 1989, 91, Chișinău, Republic of Moldova ("we"). For any question or request about your data, write to us at [email protected].

2. Laws that apply

Law No. 195/2024 on personal data protection of the Republic of Moldova, in force since 23 August 2026;
Law No. 284/2004 on electronic commerce, for commercial communications;
Regulation (EU) 2016/679 (GDPR), where it applies to people in the European Union or the European Economic Area.

3. What this policy covers

It covers the fineguide.ai website (including the blog at /blog), the contact form, demo booking, the chat assistant on the site, and Fineguide accounts.

It does not cover the data our customers put into the platform about their own customers, such as conversations, contacts or calls. For that data our customer is the controller, and we process it only on their behalf and under our contract with them. If you talked to a company that uses Fineguide, that company's privacy policy applies.

4. What we process, why, and for how long

When you visit the website

Data: IP address, browser and device type, pages requested, date and time.
Why: to deliver the site, protect it from abuse and fix errors. This data passes through our servers and Cloudflare.
Legal basis: our legitimate interest in running a secure website.
How long: only as long as needed for security and troubleshooting, then it is deleted.

Storage your browser needs

These are needed for the site to work the way you asked, and are not used for advertising:

fg-lang (cookie and local storage, 1 year): your language. For visitors from Moldova and Romania, the server sets it on the first visit based on the country derived from the IP address.
fg-consent (local storage, 12 months): your choice about advertising cookies.
fg-country (cookie, 24 hours, English pricing page only): the country derived from your IP address, so prices show in the right currency.
fg-cur and fg-period (local storage, until you clear them): the currency and billing period you chose on the pricing page.
The chat assistant keeps its settings (up to 24 hours), whether its window is open (1 hour) and whether you dismissed its greeting.
The account button: the site asks app.fineguide.ai whether you are already signed in, to show the right button. It uses your existing session and creates no new data.

Legal basis: our legitimate interest in providing the site in the form you requested.

Advertising measurement (only with your consent)

Google Ads (Google) and the Meta Pixel (Meta Platforms) load only after you press "Accept" in the cookie window.
Data: IP address, browser, pages visited, and identifiers such as the _gcl_au and _fbp cookies, which Google and Meta keep for up to 90 days.
Why: to learn which ads bring visitors to the site.
Legal basis: your consent. You can withdraw it at any time under Cookie settings in the footer of any page; withdrawing does not affect processing done before.

When you use the contact form

Data: your name, email address, subject and message.
Why: to reply to you. Your message becomes a ticket in our support system.
Legal basis: steps taken at your request, and our legitimate interest in answering enquiries.
How long: for as long as the conversation lasts and any follow-up needs it, then it is deleted.
Name, email and message are required; without them we cannot reply.

When you talk to the chat assistant on the site

Data: what you type in the chat and any details you choose to share.
Why: so the assistant can answer. Messages are processed by the AI model providers we use to generate the reply.
Legal basis: our legitimate interest in answering questions about the product.
How long: as long as needed to follow up on your request and improve answers, then it is deleted.
Replies are generated automatically. The assistant makes no decisions that have legal effects on you.

When you book a demo

Booking happens through Calendly, which receives your name, email, the time you choose and your answers. Calendly may ask separately for consent to its own cookies.
Legal basis: steps taken at your request before a possible contract.

When you have a Fineguide account

Data: name, email, organisation, account settings, billing details and how you use the service.
Why: to provide the service, bill for it and support you. Payments are processed by Stripe.
Legal basis: performance of our contract; legal obligation for accounting records.
How long: while the account is active, then as long as accounting and tax law requires for invoices.

Fonts

Pages load fonts from Google Fonts. That service receives your IP address when the page loads. Legal basis: our legitimate interest in displaying the site correctly.

The blog

If you leave a comment on the blog where comments are open, we receive your name, email, comment and IP address, to publish it and prevent spam.

Commercial emails

We send news or offers only if you have given your consent beforehand. Every such email has an unsubscribe link, and you can object at any time without giving a reason.

5. Who receives your data

We do not sell your data. We share it only with providers who help us run the service and process it on our behalf:

Hosting and network: Amazon Web Services (the application, file storage and sending email), dedicated servers in the European Union (databases), and Cloudflare.
AI models and voice: OpenAI, Anthropic, Google (Gemini) and ElevenLabs.
Payments: Stripe.
Scheduling: Calendly.
Advertising, only with your consent: Google and Meta Platforms.

We may also disclose data to public authorities where the law requires us to.

6. Transfers outside the Republic of Moldova

Some of these providers process data in the European Union or the European Economic Area, and others in the United States or other countries. Transfers to countries that do not ensure an adequate level of protection take place only on a basis allowed by Law No. 195/2024, for example standard contractual clauses. You can ask us for details at [email protected].

7. Your rights

You have the right to:

find out what data we hold about you and get a copy (access);
have inaccurate or incomplete data corrected (rectification);
have your data deleted (erasure);
have processing restricted;
receive your data in a structured format, or have it sent to another controller (portability);
object to processing based on our legitimate interest and, at any time and without giving a reason, to processing for direct marketing;
withdraw your consent at any time;
not be subject to a decision based solely on automated processing that has legal effects on you.

How to use them: write to us at [email protected]. You can also change or delete some data directly in your account settings. We reply free of charge within one month of receiving your request. If a request is complex or we receive many, this can be extended by two more months, and we will tell you so within the first month. We may ask for information to confirm the request comes from you.

8. Your right to complain

If you believe we process your data unlawfully, you can lodge a complaint with the National Center for Personal Data Protection (Centrul Național pentru Protecția Datelor cu Caracter Personal):

Address: str. Serghei Lazo 48, MD-2004, Chișinău, Republic of Moldova
Phone: +373 22 820 801
Email: [email protected]
Website: datepersonale.md

You can also go to court. If you live in the European Union or the European Economic Area, you can complain to the data protection authority in your own country. We would appreciate the chance to sort things out first, so please write to us.

9. Children

Fineguide is a service for businesses and is not aimed at children under 14. We do not knowingly collect their data. If you learn that a child has given us personal data, write to us and we will delete it.

10. Security and incidents

We protect data with encrypted connections, role-based access and firewalls. If a personal data breach is likely to affect people's rights, we notify the National Center for Personal Data Protection within 72 hours of becoming aware of it and, where the risk is high, we tell you as well.

11. Changes

We update this policy when the way we process data or the law changes. The date of the last update is at the top of the page. If a change is significant, we announce it clearly on the site or by email.