Privacy Policy

Effective Date: March 28, 2026 · Last Updated: July 16, 2026

The website fynos.ai (the “Site”) and the FynOS platform (the “Services”) are owned and operated by Consilara Technologies Private Limited (“Consilara,” “FynOS,” “we,” “us,” or “our”), a company incorporated under the Companies Act, 2013 (CIN: U62011KA2026PTC224020) with registered office at Flat No. 2702, Sy. No. 1280/52, Val Mark Apartments, Hulimavu, Bangalore South, Bengaluru 560076, Karnataka, India. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

This Policy primarily covers the Site and our marketing activities. Where we process business data on behalf of our customers through the FynOS platform, including data from connected business systems, we act as a service provider (processor) on the customer's instructions, as described in Section 4.

1. Information We Collect

1.1 Information You Provide Directly

• Demo Booking: When you book a demo, we collect your name, email address, preferred date and time, and optionally, guest email addresses. This information is used to schedule a meeting and send calendar invitations.
• Contact Forms: When you submit a contact or early access form, we collect your name and email address.
• Chat (Ask FynOS): When you use our AI chat assistant, we collect the messages you send. Conversation history (up to 6 messages) is maintained for the duration of your session to provide contextual responses.

1.2 Information Collected Automatically

• Device & Browser Information: We collect your device type (mobile, tablet, or desktop), browser name, operating system, screen dimensions, and viewport size. This helps us optimize the Site for your device.
• Usage Data & Session Recordings: We use PostHog to collect page views, interaction events, and general usage patterns, and to record sessions (replays of how visitors interact with pages of the Site). Session recordings may include information you type into forms or the chat on the Site, such as your name and email address. We also use Firebase Analytics (powered by Google Analytics) to collect page views and aggregated usage statistics. This data is used to improve the Site and understand product interest.
• IP Address: Your IP address is collected for rate limiting (to prevent abuse of our booking and chat services) and is stored alongside demo bookings for fraud prevention.
• Campaign Data: If you arrive at the Site via a marketing link, we collect UTM parameters (source, medium, campaign, term, content), the referring URL, and your landing page. This data is stored in your browser's local storage and included in form submissions to help us understand which marketing channels are effective.

1.3 Cookies and Local Storage

We use a small number of cookies and browser local storage entries: PostHog stores a device identifier and session information to distinguish visitors and link your activity across visits and across FynOS web properties; Google Analytics sets cookies (such as _ga) to measure page views; we use local storage to remember your theme preference (light/dark mode) and to store campaign attribution data (UTM parameters and referrer). We do not use third-party advertising cookies. You can clear cookies and local storage at any time through your browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

We do not use your personal data for automated decision-making or profiling that produces legal effects.

No AI Model Training: Your business data, transaction data, and any data you provide through the FynOS platform will not be used to train, fine-tune, or improve any general-purpose or shared AI model. Any such use requires your separate, explicit written consent.

3. Third-Party Services

We share data with the following third-party service providers, each acting as a data processor on our behalf:

All third-party providers (subprocessors) are bound by data processing agreements with confidentiality and security obligations equivalent to our own. Consilara remains responsible for the acts and omissions of its subprocessors. Data may be transferred to and processed in the United States.

We do not sell, rent, or trade your personal data to any third party.

4. Platform Data and Connected Business Systems

When a customer uses the FynOS platform, they may authorize FynOS to connect to third-party business systems on their behalf, such as QuickBooks Online, the Amazon Selling Partner API, Shopify, other marketplaces and sales channels, payment providers, and banks (“Connected Systems”). Data retrieved from Connected Systems, together with data the customer uploads to the platform (“Platform Data”), may include order, settlement, payout, inventory, accounting, vendor, and customer records of the customer's business.

We handle Platform Data under the following commitments:

• Customer ownership: Platform Data belongs to the customer. We process it as a service provider on the customer's instructions, solely to provide, maintain, secure, and support the Services, including marketplace finance, reconciliation, inventory, and accounting workflows.
• Purpose limitation: We request access only to the data required for the functions you enable. We do not sell Platform Data, use it for advertising, or disclose it to third parties other than the subprocessors listed in Section 3 as needed to operate the Services. We do not use Platform Data to train shared AI models (see Section 2).
• No cross-customer aggregation: We do not aggregate Platform Data across customers for sale or disclosure to any party. Where the Services surface benchmarks or insights, they are derived only from aggregated and anonymized data, and only where permitted by the applicable platform policies.
• Security: Platform Data is encrypted in transit (TLS 1.2 or higher) and at rest. Access is restricted to personnel who need it to operate or support the Services, under least-privilege access controls.
• Retention and deletion: Platform Data is retained for as long as the customer's subscription is active. On written request, or within 30 days of termination of the subscription, we delete or return Platform Data, except where retention is required by law. Data received through the Amazon Selling Partner API is retained and deleted within the timelines prescribed by Amazon's Data Protection Policy, including deletion of any buyer personal information no later than 30 days after order delivery unless retention is required for tax, regulatory, or legal purposes.
• Platform policies: Our use of information received from Intuit QuickBooks APIs complies with Intuit's developer terms and policies. Our receipt and use of information through the Amazon Selling Partner API complies with Amazon's Acceptable Use Policy and Data Protection Policy, including their restrictions on data use, sharing, and retention.
• Incident response: Security incidents affecting Platform Data are handled as described in Section 7, including notification of affected customers and, where required, the relevant platform provider and authorities.

5. Data Retention

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdrawal of Consent: Where processing is based on consent, withdraw it at any time.

For users in the European Economic Area (EEA): You have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing are described in Section 2.

For users in California (USA): Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

For users in India: Your personal data is handled in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, as its provisions come into force, the Digital Personal Data Protection Act, 2023. You have rights to access, correct, and erase your personal data, and to nominate a representative to exercise these rights.

Grievance redressal (India): Consilara has designated a Grievance Officer for queries and grievances relating to personal data, reachable at support@fynos.ai. We acknowledge and resolve grievances within one month of receipt.

To exercise any of these rights, email us at support@fynos.ai. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS) for all data transmitted to and from the Site, encryption at rest for Platform Data, access controls limiting who within our organization can access personal data, rate limiting on API endpoints to prevent abuse, and database security rules restricting data access.

In the event of a confirmed or reasonably suspected data breach affecting your personal data, we will notify affected individuals and relevant authorities without undue delay and no later than 72 hours of confirmation, in accordance with applicable law.

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

The Site is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at support@fynos.ai and we will delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including India (where Consilara is incorporated and operates) and the United States (where Google, PostHog, and Anthropic are based). We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically.

11. Governing Law

This Privacy Policy is governed by the laws of India. Subject to applicable law, the courts at Bengaluru, Karnataka, India shall have exclusive jurisdiction over any disputes arising out of or relating to this Policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, email us at support@fynos.ai.