Privacy Policy
In force since 9/2/2026.
This policy explains what Finasst collects, why, who else sees it and how you get it back or removed. It applies to the website and to the mobile application.
1. Who is responsible for your data
The controller of the personal data described here is [—]. Write to privacidade@finasst.net for anything concerning this policy, including the requests described in section 7.
2. What we collect
You can use every calculator without an account, and doing so sends us nothing: the calculation runs inside your browser. If you create an account we store your email address, the display name you choose, your country and a cryptographic hash of your password — never the password itself. If you save a simulation we store the figures you entered and the resulting schedule. Our servers also record technical data needed to run the service: IP address, browser type and the time of each request, kept in the access log. To apply the daily simulation limit of the free plan, we keep for a few days a count of the distinct simulations your account or your browser has run, together with a random identifier your browser generates for itself and, for visitors without an account, a code derived from your network address that changes every day and cannot be reversed to it. If you subscribe to the Pro plan we also keep the state of the subscription; your card details are typed straight into Mercado Pago's form and never reach us.
3. Why we use it, and on what legal basis
Account data is used to sign you in and to keep your saved simulations apart from everyone else's; the legal basis is the performance of the contract between us. Technical logs are used to keep the service available and to detect abuse; the legal basis is our legitimate interest in a working, secure service. Advertising and measurement cookies are used only on the basis of the consent you give in the banner, and only for as long as you leave it in place. The simulation count and the subscription state are used to apply the plan you chose, on the legal basis of performing our contract, and the network-derived code is used to stop the limit being bypassed in bulk, on the basis of our legitimate interest in a fair and secure service.
4. Advertising and cookies
Where advertising is enabled, this service uses Google AdSense on the web and Google AdMob in the mobile application. Google and its partners use cookies and similar identifiers — among them the DoubleClick cookie and, on Android, the advertising ID — to serve and measure ads, which may be personalised on the basis of your previous visits to this and other sites. No advertising request is made before you allow it: the advertising library is not even loaded until you do.
Google's practices
5. Who else receives your data
We do not sell personal data and we do not share it for anyone else's marketing. Data reaches third parties only in these cases: the hosting and database providers that run the service on our behalf; Google, for advertising and measurement, and only under the consent described above; and any authority to which the law obliges us to disclose. Public reference data used in the calculations — benchmark rates, tax tables — is fetched from official sources and carries nothing about you. Payments for the Pro plan are processed by Mercado Pago, which receives the card details and the payer's email address and is responsible for them under its own privacy policy.
6. How long we keep it
Account and simulation data is kept until you delete your account, and is removed within thirty days of the request. Access logs are kept for the period required by the applicable law, which in Brazil is six months under the Marco Civil da Internet. Refresh tokens expire on their own and are revoked when you sign out. The counts behind the daily simulation limit are discarded after a few days.
7. Your rights
You may ask for confirmation that we process your data, for a copy of it, for the correction of anything inaccurate, for its deletion, and for it to be handed to you in a portable format. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful before. These rights come from the LGPD in Brazil and from the GDPR in the European Union, and we honour them for everyone regardless of where they live. Requests are answered within fifteen days.
8. Deleting your account
You can delete your account and everything attached to it from inside the application, and also from the deletion page linked in the footer of every page — no sign-in needed to read it, and no need to write to anyone first. Deleting removes the account, the saved simulations, the schedules and the active sessions. Nothing survives except entries in the access log, which no longer identify you and are kept for the legal period described in section 6.
9. Children
This service is meant for adults and is not directed to children. We do not knowingly collect data from anyone under 18, and the advertising shown here is not designed for a child audience. If you believe a child has created an account, write to us and we will remove it.
10. Security and international transfers
Traffic is encrypted in transit, passwords are stored only as hashes, and access to saved data is restricted to the account that created it by a filter applied at the database layer rather than page by page. Our providers, Google among them, may process data on servers outside your country; where that happens the transfer relies on the standard contractual clauses those providers publish.
11. Changes to this policy
When this policy changes in a way that affects what we do with your data, the consent banner is shown again and the date at the top of this page is updated. Continuing to use the service after that means you have read the new version.
Contact: privacidade@finasst.net