Privacy Policy

finch is a writing assistant that helps you draft LinkedIn posts in your own voice. It is made by LoudLogics, a two-person studio based in Pakistan, and is served at https://finch.loudlogics.com. In this policy, "finch", "we" and "us" mean LoudLogics and the finch service.

We are responsible for the personal information described here. You can reach us at yousuf.khan@loudlogics.com.

Your Google account details. You sign in with Google. We ask Google only for basic identity (the "openid", "email" and "profile" scopes). From that we store your Google account ID, your email address (we only accept verified emails), your name and the link to your profile picture. We do not receive or store your Google password. We do not keep Google's access tokens, and we do not ask for access to your Gmail, Drive, Calendar, contacts or any other Google data.

What you tell finch in the interview. Before you write, finch asks you questions about yourself: your role, goals, audience, experience, how you like to sound, topics you avoid, and optional writing samples. We store your answers, short summaries of them, and a description of your writing style that finch derives from your samples. Together these make up your persona.

Your LinkedIn profile, if you choose to import it. Importing is optional. If you paste the link to your public LinkedIn profile, we send that link to a scraping service (Apify) that reads your publicly visible posts. We keep your current headline and up to five of your recent original posts, and use them as part of your persona. We do not store the profile link itself. finch never signs in to LinkedIn as you and never posts on your behalf.

Your ideas, drafts and saved posts. When you ask for a draft, the idea you typed and your persona are sent to our AI provider to write it. Drafts are not stored on our servers unless you save them. While you work, your current idea and draft are kept in your browser's session storage for that tab, so a refresh does not lose them. When you save a post, we store its text, the idea it came from and the kind of draft it was.

Technical data. When you sign in, we store a record of your session: when it started, when it was last used, when it expires and your browser's user agent string. Like most web services, our servers also keep request logs, which include things like your IP address, the page or API path requested and the time.

finch uses two cookies, both strictly necessary to sign you in:

• __Host-finch_sid keeps you signed in. It holds a random token. We store only a hash of that token, not the token itself. A session ends after 7 days without use, or 30 days after you signed in, whichever comes first, or when you sign out.
• __Host-finch_oauth exists only while you are signing in with Google, for at most 10 minutes. It protects the sign-in from tampering.

Both cookies are secure, HTTP-only and limited to the finch site. We do not use analytics, advertising or tracking cookies.

We use Umami, a privacy-focused analytics service, to count visits and see which pages and buttons are used. It sets no cookies and does not track you across other websites. It records the page you visited, the referring site, your browser, operating system, device type, screen size, language and an approximate country derived from your IP address, and how quickly pages load. Your IP address itself is not stored. Session IDs in finch page addresses are removed before anything is sent. If your browser sends a Do Not Track signal, no analytics are collected. Umami stores this data on servers in the United States or the European Union.

• To sign you in and keep your account secure.
• To run the interview and build your persona.
• To write and refine drafts in your voice.
• To show you your saved posts.
• To keep the service working, fix problems and prevent abuse.
• To reply when you contact us.

We do not sell your personal information. We do not use it for advertising, and we do not share it with anyone for their own marketing.

finch uses Google's Gemini models, through the Gemini API, to read your interview answers, learn your writing style and write drafts. To do that, the relevant content (your answers, writing samples, persona and ideas) is sent to Google for processing. Google processes it under its API terms.

AI can be wrong. finch may get facts about you wrong or produce text you would not say. Always read a draft before you post it.

We use the information we receive from Google sign-in (your account ID, email address, name and profile picture link) only to create and secure your finch account and to show you who is signed in. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide finch, to comply with the law, or as part of a merger or sale of the business with notice to you.

finch's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use a small number of service providers to run finch. They act on our instructions:

• Google Cloud hosts the finch application in the United States.
• Google Gemini API processes your interview answers, persona and ideas to write drafts.
• Umami provides cookieless website analytics, as described above.
• Apify fetches your public LinkedIn headline and posts, only if you choose to import your profile.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case we will tell you.

We keep your account, persona and saved posts for as long as your account exists. When you delete a saved post, it is removed. If you redo the interview, finch starts a fresh persona, and your earlier answers stay stored with your account until you ask us to delete them.

Expired sign-in sessions are cleared out over time. Server logs are kept for a limited period for security and troubleshooting, then deleted. When you ask us to delete your account, we delete your account, persona, interview answers and saved posts.

finch is served only over HTTPS. Your session cookie cannot be read by scripts on the page, and we store only a hash of your session token. Google sign-in is verified on our server. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.

Depending on where you live, you may have the right to:

• See the personal information we hold about you.
• Correct information that is wrong.
• Delete your account and your data.
• Get a copy of your data in a portable format.
• Object to or restrict some uses of your data.
• Withdraw consent where we rely on it.
• Complain to your local data protection authority.

You can delete saved posts yourself in finch. For anything else, including deleting your account and all its data, email us at yousuf.khan@loudlogics.com. We will confirm the request comes from you and respond within 30 days. We will not treat you differently for exercising these rights.

finch is not for anyone under 16. We do not knowingly collect information from children under 16. If you believe a child has given us information, email us and we will delete it.

LoudLogics is based in Pakistan, and finch runs on servers in the United States. If you use finch from elsewhere, your information will be transferred to, stored and processed in these countries, which may have different data protection laws from yours. We take steps to protect it as described in this policy.

We may update this policy as finch changes. We will change the effective date above, and if a change is significant, we will tell you by email or in the app before it takes effect.

Questions or requests about your privacy: yousuf.khan@loudlogics.com. See also our Terms of Service.