Privacy Policy

FiscoPoint is a product of Oasystemx LLC. This policy covers personal data handled through the website, applications, support channels, connected services, and the five FiscoPoint modes. When an organization enters data about staff, clients, vendors, or contacts, that organization generally determines why the data is used and FiscoPoint processes it to provide the service.

Data is processed to provide requested features, authenticate users, enforce permissions and plan entitlements, synchronize authorized connections, generate requested AI assistance, maintain records, prevent misuse, support users, comply with law, and improve reliability.

Relevant prompts and selected workspace content may be sent to model providers when a user requests AI assistance. Connect records meeting participants, timing, and the reason a meeting ended, but does not record audio or video unless a participant explicitly saves notes or a transcript. Payroll stores the staff and bank details needed to prepare payment files; FiscoPoint does not move money. Connected services are optional and remain subject to provider and geographic availability.

Managed infrastructure provides encryption in transit and at rest. Organization isolation, role-based permissions, multi-factor authentication options, private file access, and audit records support account and workspace security. FiscoPoint does not claim SOC 2, PCI DSS, ISO 27001, or another independent security certification. See the Trust Center for the current control summary.

Depending on location, laws including the GDPR and UK GDPR, CCPA and CPRA, Brazil's LGPD, Canadian privacy laws, Australia's Privacy Act, Nigeria's Data Protection Act, South Africa's POPIA, and comparable laws may provide rights to access, correct, export, delete, restrict, or object to processing, to withdraw consent, to appeal a privacy decision, or to opt out of sale, sharing, or targeted advertising. Rights vary and may be limited by lawful exceptions. Identity verification may be required, and workspace-managed requests should normally go first to the organization controlling that workspace.

Data is retained while an account is active and as needed for the service, security, disputes, and applicable recordkeeping duties. Deletion is scheduled with a recovery period, and some records may be retained or de-identified where law, fraud prevention, security, or contractual duties require it.

FiscoPoint may process data in jurisdictions other than your own. When we do, we use recognized transfer safeguards and supplementary protections where required by applicable law.

FiscoPoint is not directed to children and should not be used to create an independent account by anyone below the minimum digital-consent age applicable in their country.

Guest meeting invitations are single links valid only for one meeting; guests never see other conversations, records, or financial information, and invitations, joins, departures, and host actions are recorded in the audit trail. We also record which scheduled tasks an administrator switched on and the outcome of each run, and we store interface preferences such as the selected workspace, dashboard view, and menu groups. These preferences describe how the interface is arranged and do not change who may see data.

A client portal link lets its holder view that client's sent quotes, invoices, and consultations, never drafts. Links expire after 90 days, can be revoked, and views are counted. Authorized organization members control these links. Imported contacts, saved views, templates, and client intelligence remain within the organization. Invoice and payment events can update the corresponding client's CRM history. Client intelligence describes the organization's own records and is not shared with other organizations.

Language and theme preferences are saved to your profile and browser so they follow you across devices. Each mode keeps its own default currency. Changing the display currency does not convert or alter recorded amounts, and preferences are not sold or used for advertising. Connecting a financial account is optional. Imported bank and investment activity is kept separate from the ledger until reviewed and posted. Disconnecting stops future synchronization; records already imported remain unless deleted through available controls.

Requested AI assistance uses Google Gemini through Google AI Studio; only relevant figures and text are sent. Plaid supports user-authorized financial connections, and Stripe processes subscription billing. FiscoPoint does not store full card numbers. Hosting, sign-in, storage, and security providers support the service. Providers process data under their own privacy terms and applicable safeguards. FiscoPoint does not sell your data to them.

Answers given at sign-up are stored on your profile and used only to set up your workspace, switch on the areas you asked for, and suggest a plan; you can change or clear them in Settings. Dashboard views and hidden panels are saved with the workspace. Background tasks that administrators switch on read only your organization's own records, name the figures they used, and keep a run history. Business and personal records are kept in separate areas and are not shared between environments unless you switch sharing on.

Plaid is currently the only active bank connection provider, for the United States and Canada. Imported records use FiscoPoint's own format, so changing providers does not change your history, and each sync is logged. Credit scores shown are guidance drawn from published bureau information or entered by you; FiscoPoint never generates or estimates a credit score.

FiscoPoint is a product of Oasystemx LLC, the party responsible for the service and for data protection purposes. Legal, privacy, and data requests including access, export, and deletion: legal@fiscopoint.com. Product support: support@fiscopoint.com. General enquiries: info@fiscopoint.com. Telephone: +1 (407) 664-1040. Account and administration enquiries: admin@fiscopoint.com.