Privacy Policy

This Privacy Policy describes how TagniFi, LLC ("TagniFi", "we") handles personal information collected through tagnifi.com, the TagniFi platform, the Excel add-in, Spread and the API (together, the "Service").

It covers information about people — the analysts who use the Service and the visitors to our site. It does not govern the public company financial data we publish, which is compiled from filings and other public sources.

Account information: name, work email, firm, job title and the credentials used to sign in. Billing information: the contact and payment details needed to invoice your subscription, processed by our payment provider — we do not store full card numbers.

Communications: what you send us in support requests, contact forms, trial requests and training sessions, including anything you attach.

Usage data: the pages, searches, screens and functions you use, together with timestamps and the actions recorded in our audit log. Device and connection data: IP address, browser type, operating system and approximate location derived from IP.

We use this to operate the Service, keep it secure, support you, and understand which features are worth building on. We do not build advertising profiles.

Financial statements and other material you upload to Spread remain yours. We process them solely to produce your results — extracting line items and mapping them to your layout — and to provide support you request.

We do not sell that material, do not share it with other customers, and do not use it to train models that serve anyone else. Uploaded documents are encrypted with a key unique to your account, and TagniFi staff cannot read them without an access grant you issue.

To provide, maintain and improve the Service; to authenticate users and protect accounts; to bill and administer subscriptions; to respond to support and sales inquiries; to send service notices, release notes and, where you have opted in, research and product updates; and to comply with legal obligations.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects.

We use cookies that are necessary for the Service to function — sign-in sessions, security and preferences — and a limited set of first-party analytics cookies that tell us how the product is used.

We do not run advertising networks or third-party ad trackers on the platform. You can block non-essential cookies in your browser without losing access to the Service.

We send product and research email only to people who requested it or who are administrators on an account. Every marketing message carries an unsubscribe link, and unsubscribing does not affect the operational notices your subscription requires — billing, security and material service changes.

With service providers who process data on our behalf under contract: hosting and storage, AI extraction, telemetry, payment processing and email delivery. Each receives only what its role requires and may not use the data for its own purposes.

With others when you direct it, when required by law or valid legal process, to protect rights and safety, or in connection with a merger, acquisition or sale of assets — in which case this policy continues to apply until it is superseded with notice. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

The Service is operated from the United States and customer data is stored and processed in US regions. If you access the Service from outside the United States, you are transferring information to the US, where privacy laws may differ from those in your jurisdiction. Where a transfer mechanism is required, we rely on standard contractual clauses.

Account and usage information is retained for as long as your account is active and for the period afterwards needed to meet legal, tax and audit obligations. Operational telemetry is retained for 90 days; the audit log is retained for the life of the account.

Uploaded documents and extracted financials are retained while your account is active and deleted, along with their encryption keys, within 30 days of termination. We confirm deletion in writing on request and provide an export beforehand.

Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccuracies, deletion, a portable copy, or restriction of certain processing — and you may object to processing based on legitimate interests. Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have these rights under those statutes, including the right not to be discriminated against for exercising them.

Email [email protected] to make a request. We verify identity before acting and respond within the period the applicable law allows. If your firm administers your account, we may direct the request to that administrator.

We protect personal information with encryption in transit and at rest, per-account envelope encryption for financial data, enforced multi-factor authentication, least-privilege access, an append-only audit log and continuous monitoring. Our Security page describes these controls in detail. No system is perfectly secure, but we notify affected customers of a confirmed incident without undue delay and no later than 72 hours after confirmation.

The Service is a professional tool intended for business use. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact [email protected] and we will delete it.

We may update this policy. If a change is material, we will give at least thirty days notice by email or in-product before it takes effect, and we will update the effective date at the top of this page. Prior versions are available on request.

Questions, requests and complaints go to [email protected], or by mail to TagniFi, LLC, Attn: Privacy, Tampa, Florida. Security-specific questions go to [email protected]. If you are unsatisfied with our response, you may have the right to complain to your local data protection authority.