Privacy policy
Last updated 30 October 2026
FinMocker is a learning platform for investing, risk and compliance. This policy explains what we collect, why, and the choices you have. We collect only what we need to run the service, and we never sell personal data.
What we collect
Founding waitlist
Email, and optionally name, company or college, role, region and plan choice; your referral code and who referred you; whether you confirmed your email; a keyed one-way hash of your network address (to stop fake referrals; we never store the address itself).
Certificates & share cards
The name you enter, optionally your email, the lab result and the settings that produced it. Certificate pages are public by design so others can verify them.
Team quote requests
Your work email, name, company, region, licence count and message.
Intel Bot
Your questions are sent to Google's Gemini API to generate answers. FinMocker does not store your conversations.
Usage analytics
Aggregate, cookie-free page and event statistics via Vercel Web Analytics. No cross-site tracking and no advertising profiles.
In your browser
XP, streaks, badges, theme and form details you choose to remember are kept in your browser's local storage and never sent to us.
Why we use it
- To hold your founding spot, credit referrals and contact you when checkout opens.
- To issue and verify certificates, and to reply to team requests.
- To prevent abuse (rate limits, fake referrals) and keep the service secure.
- To send the Compliance Pulse newsletter, only if you opted in. Every newsletter has an unsubscribe link.
Cookies
We use only functional cookies; no advertising or tracking cookies.
Who processes data for us
Vercel (hosting and analytics) · Supabase (database) · Google (Gemini AI answers) · Resend (transactional email). They act on our instructions under data-processing terms. Data may be processed outside your country with appropriate safeguards.
How long we keep it
Waitlist and lead data: until launch plus 24 months, or until you ask us to delete it. Certificates: for as long as they should stay verifiable, unless you ask us to revoke them. Abuse-prevention counters: about one day.
Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act 2023, the EU/UK GDPR and US state privacy laws) you can ask to access, correct, delete or export your data, withdraw consent, or object to processing. Email privacy@finmocker.com and we'll respond within 30 days. You can also complain to your local data-protection authority.
Children
FinMocker is not directed at children under 16, and we don't knowingly collect their data.
Changes
If we make material changes we'll update this page and, where appropriate, email you.