Privacy Policy

Cookie Finance, INC. Cookie Policy 

Last updated: April 28, 2026  

Cookie Finance, Inc. (“Company,” “we,” “our” or “us”) respects your concerns about privacy and are committed to protecting it through our compliance with this policy. This Privacy Policy describes how we collect, use, maintain, disclose and protect (collectively, “process”) personal information from and about you when you use our services (including our applications ‘Cookie Jar’ and ‘Cookie Finance Portal’) (“Services”), such as when you:  

• Visit our website at https://cookiefinance.co/ (the “Website”);   

• Interact with our products and software; and   

• Engage with us in other related ways, including any communications, sales, marketing or events.  

Please read this Privacy Policy carefully to understand our policies and practices regarding your personal information and how we will handle it. If you do not agree with our policies and practices, please do not use our Services. By accessing or using our Services, you agree to the collection, use, and sharing of your information as described in this Privacy Policy. This Privacy Policy may change from time to time (see “Changes to Our Privacy Policy”). Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.   

INFORMATION WE COLLECT AND HOW WE COLLECT IT  

“Personal information” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, email address, or other any other identifier we may use to contact you).   

We collect only the personal information that is necessary for the development, marketing, selling, delivery, maintenance and support of our Services. The specific information we collect and how we use it reflects the nature of your relationship with us.   

1. Information You Provide  

We collect a variety of information that you provide directly to us. For example, we collect information from you through:   

• Your registration to use the Services or when you create or update an account;  

• Your use of the Services, including details of your transactions and the fulfillment of your transactions;  

• Requests, questions or correspondence you submit to us via online forms, email or otherwise; or  

• Your communications with our customer support or sales teams via email, phone, videoconferencing, chat, or other means.  

The types and categories of personal information we collect directly from you include:  

• Account and contact information, such as name, email and postal address, phone number, and other contact information you provide us;   

• Financial information, such as bank account details, tax and payroll records;   

• Login credentials, such as user name and password;   

• Account information and preferences, such as email and contact preferences;  

• Technical and usage information, such as how you interact with our Services;   

• Communications data, such as your communication preferences and details or the content of your communications with us;   

• Professional information, such as your company name, company address, and your occupation/profession;   

• Social security number or other government-issued identifier;   

• Payment and billing information, including billing name and address;   

• Account history, including information about your subscription, account, and transactions;   

• Marketing information, such as your preferences for receiving marketing communications and details about how you engage with those communications;   

• Social media handles, content and other data posted on our official social media pages, and information we obtain from third-party social media services, such as username, profile picture, biography, follower count, and follower engagement, if you choose to link to, create, or log into the Services through these services; and   

• Any other information you choose to directly provide to us in connection with your use of the Services, such as through chat, email, or other communications or forms.   

Some of the information identified above may be considered sensitive personal information under certain laws. If required under applicable law, we will collect and process sensitive personal information only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with certain features, services, or information.   

1. Information We Collect Through Automated Means  

As you visit, navigate, and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing activities, and patterns, including:  

• Details of your visits to our Website, including referring/exit pages, the number of clicks, files you download, the amount of time spent on particular pages or areas, the dates and times you used the Services, logs, and other similar information;   

• Information about your computer and Internet connection, including your IP address, identifiers associated with your devices, web browser characteristics, device characteristics, language preferences, operating system, and browser type.   

The technologies we use for this automatic data collection may include:  

• Cookies (or other browser cookies) and similar technologies: A “cookie” is a small piece of data (a text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you.  

• Web Beacons (also known as an Internet tag, pixel tag or clear GIF): Web beacons link web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server.  

• Server Logs: Server logs automatically record information and details about your online interactions with us. For example, server logs may record information about your visit to our Services on a particular time and day and collect information such as your device ID or IP address.   

• SDKs and mobile advertising IDs: Our Services may include third-party software development kits (“SDKs”) that allow us and our service providers to collect information about your activity. In addition, some mobile devices come with a resettable advertising ID that, like cookies and pixel tags, allow us and our service providers to identify your mobile device over time for advertising purposes.   

• Third-party plugins: Our Services may include plugins from other companies, including social media companies. These plugins may collect information, such as information about the pages you visit, and share it with the company that created the plugin even if you do not click on the plugin. These third-party plugins are governed by the privacy policies and terms of the companies that created them.   

These technologies help us remember your information, understand how you interact with our Services, tailor the Services to your preferences, and otherwise manage and enhance our Services.   

Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that if you elect not to accept cookies, some functionality and areas of the Services may be restricted. To learn how to manage your cookies, please follow the instructions from your specific browser.  

1. InformationCollected from Others 

From time to time, we may collect information about you from other sources, including publicly available sources or third party sources, such as social media sites or integrated services (such as Plaid, Gusto, Stripe, etc.) that you connect to our Services, to the extent permitted by applicable law. We use this information to supplement the information we collect directly from you and to improve and enhance our Services.   

ANALYTICS AND ADVERTISING  

We may use vendors to measure the effectiveness of the ads displayed on our behalf in response to keyword searches on third party search engines. These vendors use automated technologies (such as pixels) on our Website to identify site visitors who clicked on such ads on these third-party search engines.  

Analytics. We may also use third-party analytics services on our Website, such as Google Analytics. The analytics providers that administer these services use cookies and other automated technologies to help us analyze your use of the Website. The information collected through these automated technologies (including IP addresses) may be disclosed to these analytics providers who use the information, for example, to evaluate use of the Website. To learn more about Google Analytics and how to opt out, please visit https://tools.google.com/dlpage/gaoptout.  

Advertising. We allow select third party advertising technology partners to place cookies or other tracking technologies on the browser of your device to collect information about you as discussed above. These third parties (e.g., ad networks and ad servers such as Google) may use this information to serve relevant content and advertising to you as you browse the Internet, and access their own cookies or other tracking technologies on your browser to assist in this activity. If you are interested in more information about these online advertising activities, and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link, or Your Online Choices to opt-out of receiving tailored advertising from companies that participate in those programs.  

We do not control these opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. Please note that if you use these mechanisms, you may still see advertising on the Internet, but it will not be tailored to you based on your online behavior over time.  

Do Not Track.. Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the online services you visit indicating that you do not wish to be tracked. Because there is not a common understanding on how to interpret the DNT signal, our Services may not respond to all browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described in this policy.   

HOW WE USE THE INFORMATION WE OBTAIN  

We may use the information we obtain about you to:   

• Provide our Services to you, including providing you with access to and administering our Services and establishing and managing your account(s) with us;   

• Improve and develop our Services, including functionality, user experience, performance, value and to operate the Services more efficiently;   

• Provide customer support, including responding to your requests for information, handling inquiries and complaints, and providing you with more efficient and effective customer service;  

• Contact you or communicate with you about our Services including to provide you with information about updates, features, and support;  

• Promote our Services, including by sending you offers for special products and services via mail, email or text message, providing information about us and our partners, facilitating referrals, displaying online advertising, and evaluating or improving the effectiveness of our marketing efforts.   

• Personalize your experience with the Website and our Services;   

• Verifying your identity, such as conducting identity verification when you apply for our Services, authenticating your login credentials, and storing security questions for subsequent verification online or over the phone;   

• Operate, evaluate, develop, manage and improve the Website and our Services, including operating, administering, analyzing, and improving our Services; developing new Services; managing and evaluating the effectiveness of our communications; managing our professional relationships with vendors and other business partners; performing accounting, auditing, billing reconciliation and other internal functions;   

• Perform analytics, including market research, trend analysis, evaluating user interface and experiences, testing features and functionality, and anonymizing and aggregating personal information;  

• Conduct research, including internal systems diagnostics, monitoring, debugging, error repair, and troubleshooting;  

• Protect against security risks, such as monitoring network activity logs, detecting security incidents, and conducting data security investigations;  

• Detect and prevent fraud, such as determining fraud risk and identifying fraudulent transactions;   

• Carry out legal and business purposes, such as complying with applicable legal requirements, responding to civil, criminal, or regulatory lawsuits, subpoenas, or investigations, exercising or defending against legal claims, resolving complaints and disputes, performing compliance activities, performing institutional risk control, and complying with relevant industry standards and policies, including this Privacy Policy and Terms of Service; and    

• For any other purpose with your consent.   

We may also use the information we obtain from you for other purposes disclosed at the time your information is collected.  

Aggregate/de-identified information. We may aggregate, de-identify and/or anonymize any information collected through our Services so that such information can no longer be linked to you or your device (“Aggregate/De-identified information”). For example, we may compile aggregate statistics to understand trends, to develop, train, test or improve our AI systems and features, or to research the percentage of users accessing a specific feature. Information that has been aggregated and de-identified is no longer subject to this Privacy Policy.   

INFORMATION WE SHARE  

We do not sell your personal information or share your personal information with third parties for cross-context behavioral advertising purposes.    

We may disclose personal information that we collect or you provide as described in this Privacy Policy with:  

• Our subsidiaries and affiliates. We may share information with companies in the Cookie Finance family.  

• Business partners. We may share information with companies that we have partnered with to offer or enhance products and services for our customers or prospective customers. For example, we integrate with Gusto, Inc. (“Gusto”) to sync and store payroll information. Our Services also integrate with Intuit Limited’s Quickbooks, an invoicing and account management tool.   

• In addition, we use Hurdlr, Inc. (“Hurdlr”) in connection with our bookkeeping services and to gather and process your information. By using our Services, you agree to your personal and financial information being transferred, stored, and processed by Hurdlr in accordance with the Hurdlr Privacy Policy, available at: https://hurdlr.com/privacy.   

• If you choose to interact with a Business Partner, apply for their services or offerings, or otherwise link or sync your account to a Business Partner’s product or service, you consent to us sharing your personal information with the Business Partner providing the service or offering to process in accordance with the Business Partner’s privacy policy and terms.   

• Service providers. We use other companies to provide services on our behalf and to help us run our business. We may share information with these service providers, or they may collect information on our behalf, for various business purposes. For example, we use service providers for hosting and securing our information systems, servicing customer accounts, detecting and preventing fraud, communicating with our customers, and analyzing and improving how our Services are used.    

• Marketing partners. We may allow companies to collect information through our Services in order to provide marketing services to us. For more information, see “Analytics and Advertising” above.   

• Other third parties with your consent or as necessary to provide our products and services. We may disclose your personal information to fulfill the purpose for which you provide it. We also may share information with third parties to provide products and services that you request, such as third-party payment processors when you make payment on our Services.   

• We use Stripe as our third-party payment processor. While we retain certain billing details, we do not store or have access to your credit card number once a payment has been processed. The processing of this data is governed by Stripe’s privacy policy, available at https://stripe.com/privacy. Stripe is authorized only to store, retain, or use your billing information for the purpose of processing payments on our behalf.   

• For any other purpose disclosed by us when you provide the information.   

Legal, Compliance, and Regulatory Purposes. In addition, we may disclose information about you: (i) if we are required to do so by law or legal process (such as court order or subpoena); (ii) in response to requests by government agencies, such as law enforcement authorities, (iii) to establish, exercise, or defend our legal rights, (iv) to protect, defend or enforce our policies, terms, or agreements, (v) when we believe a disclosure is necessary or appropriate to address security or prevent physical or other harm or financial loss; (vi) in connection with an investigation of suspected or actual illegal activity; or (vii) otherwise with your consent.   

Business Transfers. We also reserve the right to transfer information we have about you in the event we sell or transfer all or a portion of our business or assets (such as in the event of a merger, acquisition, joint venture, consolidation, restructuring, divestiture, dissolution, liquidation, or other corporate change), including during the course of any due diligence process.   

RETENTION OF YOUR INFORMATION   

The personal information we collect will be retained for as long as reasonably necessary for the purposes set out in this Privacy Policy and consistent with our retention policies, in accordance with applicable laws. When determining these retention policies, we take into account the length of time personal information is required to be retained to provide the services; satisfy legal and compliance obligations and for audit purposes; address any complaints regarding the services; and defend or bring potential legal claims. De-identified and aggregated data (including Aggregated Insights Data) may be retained indefinitely, as it cannot be linked back to you.  

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION   

You have certain rights with respect to your information as further described in this section.  

• Tracking Technologies and Advertising.   

• Manage cookies on your device.   

• You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Please check your browser’s settings or support pages to learn how to manage cookies on your browser or device. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.  

• Opt out of targeted advertising.   

• Cookie Finance supports Global Privacy Control (GPC), which is a setting that allows you to communicate your privacy preferences to websites and online services that you visit. When we detect a GPC from a browser, our Services are designed to treat the browser as opted out and to stop sharing personal information for certain targeted advertising purposes, in accordance with applicable laws. Please visit the Global Privacy Control website to learn more about the setting and how to enable it on your browser.  

• You can also opt out of certain targeted advertising as described above under “Analytics and Advertising” and by adjusting the privacy settings on your mobile device.   

• Please note that your preferences will apply only to the specific browser or device from which you opt out. You will need to opt out separately on all of your browsers and devices. If you delete cookies, change web browsers, reset your mobile advertising ID, or use a different device, you may need to opt out again.   

• Opt out of our marketing communications. If, in accordance with applicable legal requirements, we send you marketing communications regarding our Services, you can opt out of our marketing emails by following the unsubscribe instructions located at the bottom of such emails.   

• Please note that regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law, including certain transactional emails, such as security alerts and notices related to your access to or use of the Services.  

• Update or modify account information. If you have an account with us, you may review, update, correct, or delete your personal information at any time by logging into your online account and modifying your information or by emailing us at help@cookiefinance.co.   

HOW DO WE USE ARTIFICIAL INTELLIGENCE (AI)  

We may use certain business information and/or aggregated/de-identified information to develop, train, test or improve our AI systems and features. We use AI technology and machine learning technologies to enhance our products and Services, including to personalize our Services and to enhance user experiences. This may include, but is not limited to, data analysis, customer support, and operational efficiency, such as to:  

• Analyze patterns and trends to offer improved user experiences;   

• Support automated responses to customer inquiries; and   

• Detect and prevent potentially harmful activities.  

Some of our third-party service providers may also use similar technologies when processing data in connection with services they provide to us.  

Some features within our Services — including financial summaries, tax strategy recommendations, and creator benchmarking insights — are generated in whole or in part through automated analysis and AI systems. These outputs are based on the data available to us at the time of generation and may not reflect your complete financial picture. They are provided for informational purposes only and do not constitute professional financial, tax, legal, or accounting advice. You should always consult a qualified professional before making decisions based on system-generated content.  

We do not use AI to make decisions that produce legal or similarly significant effects without human involvement. If you have any questions or concerns about how AI is used, please contact us using the information in the “Contact Us” section below.   

SECURITY   

We use commercially reasonable administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure or use. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.  

If you become aware of or suspect any unauthorized use of your account, please contact us immediately using the information in the “Contact Us” section below.   

THIRD-PARTY PLATFORM INTEGRATIONS  

Our Services allow you to connect third-party platform accounts — including Google, YouTube, Instagram (via Meta), TikTok, and others we may add over time — through OAuth authorization (“Platform Integrations“). When you connect a Platform Integration, we may collect and process data from that platform as authorized by you, including account identifiers, content metrics, audience data, and engagement statistics (“Social Data“).  

We access Social Data only to the extent necessary to provide the specific features you enable, and we do not use Social Data for any purpose other than providing and improving those features. We do not sell, rent, or share Social Data with third parties for advertising purposes.  

After authorizing Cookie access to your Google account, you may revoke that access at any time by visiting the “Your connections to third-party apps & services” section of your Google account security settings at https://security.google.com/settings.  

Retention and Deletion of Social Data  

We retain Social Data for as long as your Platform Integration remains connected and active. If you disconnect a Platform Integration — through your Cookie Finance account settings or directly through the third-party platform — we will delete your associated identifiable Social Data within 30 days. De-identified Social Data that has been incorporated into Aggregated Insights Data may be retained indefinitely.  

Upon account termination, identifiable Social Data will be deleted within 90 days, consistent with our general retention policy above.  

Third-Party Platform Changes  

Cookie Finance is not responsible for changes to third-party platform APIs, data access policies, or terms of service. If a platform restricts, modifies, or discontinues data access, certain features of our Services may be affected. We will make reasonable efforts to notify you of material changes but cannot guarantee continuity of any Platform Integration.  

Children’s Privacy  

Our Services are intended for a general audience and are not intended for or targeted at individuals under age 13. We do not knowingly or intentionally solicit or collect personal information online from or market to children under age 13. If we learn that we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under age 13, please contact us at help@cookiefinance.co.  

OTHER ONLINE SERVICES AND THIRD-PARTY FEATURES  

For your convenience and information, the Website or Services may contain links or references to other services, and may include third-party features such as apps, tools, widgets, and plug-ins.  If you choose to visit these sites and use their services, please note that we are not responsible for their content or privacy practices.  The collection, use, and disclosure of your information will be subject to the privacy policies of the third-party websites, and not this Privacy Policy.  To the extent any linked online services or third-party features are not owned or controlled by us, we are not responsible for these third parties’ information practices.  

CHANGES TO THIS PRIVACY POLICY  

We may update this Privacy Policy from time to time. When we do, we will post the revised Privacy Policy on our website. This Privacy Policy was last updated and became effective on the date posted in the header on this page.     

CONTACT US  

If you have questions or concerns regarding this Privacy Policy and the collection and use of your personal information, please email us at help@cookiefinance.co.  

SUPPLEMENTAL GLBA PRIVACY POLICY