Privacy Policy

Last Updated: April 15, 2026

Introduction

Finnita Inc. (“Finnita,” “we,” “us,” or “our”) is a Delaware Public Benefit Corporation that enrolls student loan borrowers into federal repayment and forgiveness programs. We take your privacy seriously. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have.

This policy applies to all information collected through our websites ‚Äî finnita.com, register.finnita.com, and app.finnita.com (collectively, the “Services”) ‚Äî as well as any emails, text messages, or other electronic communications between you and Finnita.

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services. This policy is incorporated into and subject to our Terms of Service.

Information We Collect

We collect personal information that is necessary to enroll you in federal student loan repayment and forgiveness programs and to operate our business. We collect information in three ways: directly from you, automatically when you use our Services, and from third parties.

Information You Provide to Us

When you create an account, complete an assessment, or use our enrollment services, you may provide some or all of the following:

  • Contact information: Name, email address, mailing address, phone number, and date of birth.
  • Identity information: Social Security number and driver’s license or other government-issued identification.
  • Employment information: Employer name, job title, employment start date, employment type, and employer certification documentation.
  • Financial information: Income, pay stubs, tax return information (when necessary for your application), family size, and filing status.
  • Student loan information: Federal student loan data uploaded from your studentaid.gov account, including loan types, balances, servicers, and payment history.
  • Payment information: Payment details necessary to process your Finnita subscription. Payments are processed by Stripe, Inc. ‚Äî Finnita does not store your full payment card information. See Stripe’s Privacy Policy and Terms of Service for details on how they handle your payment data.
  • Communications: Records of correspondence if you contact us for support or other inquiries, including email messages and any documentation you provide.

Information Collected Automatically

When you visit or use our Services, we automatically collect certain technical information:

  • Device and browser information: IP address, browser type and version, operating system, and device type.
  • Usage information: Pages visited, time spent on pages, referring website, and general interaction patterns with our Services.
  • Cookies and similar technologies: We use cookies to operate our Services, remember your preferences, and analyze how our Services are used. See the “Cookies and Tracking Technologies” section below for more detail.

Information From Third Parties

  • Your employer: If you access Finnita through an employer-sponsored benefit, your employer may provide us with basic information to set up your access, such as your name and work email address. Your employer does not receive your personal financial information, loan details, or any other data you provide to Finnita during the enrollment process.
  • Authentication providers: If you sign in using Google or Microsoft authentication, we receive basic profile information (such as your name and email address) from those providers to create or access your account.

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing our Services: To assess your eligibility, enroll you in federal repayment and forgiveness programs, process your applications with the U.S. Department of Education, manage your annual recertification, and maintain your account.
  • Processing payments: To process your Finnita subscription payments through our payment processor.
  • Communicating with you: To send you service-related communications, including enrollment confirmations, recertification reminders, account updates, and responses to your inquiries.
  • Improving our Services: To understand how our Services are used, identify issues, and improve the experience for all customers.
  • Legal compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
  • Protecting rights and safety: To protect the rights, property, and safety of Finnita, our customers, and others, including enforcing our Terms of Service.

We will not use your personal information for purposes materially different from those described here without notifying you.

How We Share Your Information

We do not sell your personal information. We have never sold personal information, and we will never sell personal information.

We share your information only in the following circumstances:

U.S. Department of Education and Loan Servicers

To enroll you in federal repayment and forgiveness programs, we submit your application materials ‚Äî including personal, financial, and student loan information ‚Äî to the U.S. Department of Education and/or your federal loan servicer(s). This is the core function of our service. We encourage you to review the Department of Education’s privacy practices at studentaid.gov.

Service Providers

We use a limited number of third-party service providers to help us operate our business. These providers are contractually obligated to use your information only to provide services to Finnita and to protect your information. Our current service providers include:

  • Stripe: Payment processing. Privacy Policy
  • DigitalOcean: Cloud data storage and infrastructure. Privacy Policy
  • HubSpot: Customer relationship management and communications. Privacy Policy
  • Twilio: Communications infrastructure. Privacy Policy
  • Google Analytics: Website analytics. Privacy Policy
  • Google OAuth / Microsoft OAuth: Authentication services. See their respective privacy policies.
  • Instantly: Email communications. Privacy Policy

We may update this list of service providers as our business needs change. Any new service providers will be held to the same contractual obligations to protect your data.

Employer Reporting

If you access Finnita through an employer-sponsored benefit, we may share aggregated, de-identified data with your employer for program reporting purposes — for example, the number of employees enrolled or total projected savings across the organization. We do not share your individual personal information, financial details, loan information, or enrollment status with your employer.

Legal Requirements

We may disclose your information if required to do so by law, regulation, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business Transfers

If Finnita is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

With Your Consent

We may share your information in other circumstances if you give us your explicit consent.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Services and understand how they are used.

What We Use

  • Essential cookies: Required for our Services to function. These enable you to log in, navigate the site, and use core features. You cannot opt out of essential cookies while using our Services.
  • Analytics cookies: We use Google Analytics to understand how visitors interact with our website, including which pages are visited and how long visitors spend on them. This helps us improve our Services.

What We Do Not Use

  • We do not use advertising or retargeting cookies.
  • We do not use session replay tools.
  • We do not sell data collected through cookies.
  • We do not track your activity across third-party websites.

Your Cookie Choices

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. If you disable cookies, some features of our Services may not function properly.

To opt out of Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

Data Security

We implement physical, technical, and organizational safeguards designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include:

  • Encryption of sensitive data in transit and at rest.
  • Access controls that limit who within Finnita can view your information, based on job function and need.
  • Secure cloud infrastructure through our hosting provider.
  • Regular review of our data collection, storage, and processing practices.

While we work to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-appropriate safeguards.

Your account security also depends on you. Keep your password confidential and do not share it with anyone. Contact us immediately at support@finnita.com if you believe your account has been compromised.

Data Retention and Deletion

  • Active accounts: We retain your personal information for as long as your Finnita account remains active and as needed to provide you with our Services, including ongoing recertification management.
  • Closed or inactive accounts: If you close your account or your account becomes inactive, we will delete your personal information within one (1) year, unless we are required by law to retain it longer.
  • Deletion requests: You may request deletion of your personal information at any time by emailing support@finnita.com. We will honor your request within thirty (30) days. If any information is required to be retained by law, we will notify you and explain what is being retained and why.
  • Aggregated data: We may retain aggregated or de-identified data that cannot be used to identify you. This data may be used for analytics, reporting, and improving our Services.

Artificial Intelligence and Automated Processing

Finnita may use AI-powered tools, including chatbots or other automated features, to help you navigate our Services, answer questions, and provide customer support. When these features are available:

  • AI-generated responses are for informational and navigational purposes only. They do not constitute financial, legal, or tax advice.
  • We do not use artificial intelligence or automated decision-making to determine your eligibility for federal repayment or forgiveness programs. Eligibility is determined by the U.S. Department of Education based on federal program requirements.
  • Interactions with AI features may be collected and stored in de-identified form to improve service quality.
  • AI features may be processed using third-party AI technology providers. Any such providers are contractually obligated to protect your information.
  • You may opt out of AI-powered features at any time by contacting us at support@finnita.com.

Text Messaging (SMS)

If you opt in to receive text messages from Finnita — for example, by providing your mobile phone number and giving consent during enrollment or account setup — you may receive SMS messages related to your account, including service updates, recertification reminders, and enrollment notifications.

  • Message frequency varies based on your enrollment status and account activity.
  • Message and data rates may apply under your mobile carrier plan.
  • Opt out at any time by replying STOP to any message. After processing your request, we will send no further SMS messages except for a final confirmation of your opt-out.
  • Help: Reply HELP to any message for assistance, or contact us at support@finnita.com.
  • We will not share your mobile phone number or SMS opt-in information with third parties for marketing or promotional purposes.

Children’s Privacy

Our Services are not directed to anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use our Services or provide any personal information to us.

If we learn that we have collected personal information from someone under 18, we will delete that information promptly. If you believe we may have information from or about someone under 18, please contact us at support@finnita.com.

Your Privacy Rights

All Customers

Regardless of where you live, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate personal information.
  • Delete your personal information, subject to certain legal exceptions.
  • Opt out of non-essential communications.

To exercise any of these rights, contact us at support@finnita.com. We will respond within thirty (30) days.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information was collected, the business purpose for collecting your information, and the categories of third parties with whom we share your information.
  • Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to correct: You may request that we correct inaccurate personal information.
  • Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising. Because we do not engage in these practices, there is no need to opt out ‚Äî but we affirm this commitment here.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a request, email support@finnita.com. We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

Nevada Residents

If you are a Nevada resident, you have the right to opt out of the sale of certain personal information. We do not sell your personal information. If you have questions, contact us at support@finnita.com.

Other State Privacy Rights

Privacy laws vary by state and continue to evolve. If you are a resident of a state with applicable privacy legislation ‚Äî including but not limited to Virginia, Colorado, Connecticut, Montana, and Minnesota ‚Äî you may have additional rights. Contact us at support@finnita.com to inquire about your rights under your state’s law.

Financial Privacy Notice (Gramm-Leach-Bliley Act)

Finnita collects and processes nonpublic personal information (“NPI”) in connection with providing financial products and services. Under the Gramm-Leach-Bliley Act (GLBA), we provide the following disclosures:

Categories of NPI We Collect

  • Information you provide to us directly, such as your name, Social Security number, income, employment information, and student loan details.
  • Information resulting from your transactions with us, such as your enrollment status, payment history, and recertification records.

Categories of NPI We Disclose

We disclose NPI only as described in the “How We Share Your Information” section of this Privacy Policy. We share information with the U.S. Department of Education and loan servicers to provide our core services, and with service providers who help us operate our business.

Our Commitment

  • We do not sell your NPI.
  • We do not share your NPI with nonaffiliated third parties for their own marketing purposes.
  • We limit access to your NPI to those employees and service providers who need it to provide our Services to you.
  • We maintain physical, electronic, and procedural safeguards to protect your NPI.

Because we do not share your NPI with nonaffiliated third parties except as permitted by law (for example, to process your enrollment or as required by legal process), you are not required to opt out. If our practices change, we will provide you with a revised notice and the opportunity to opt out before sharing your information in new ways.

Third-Party Links

Our Services may contain links to third-party websites or services that are not operated by Finnita. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by posting the updated policy on our website and updating the “Last Updated” date at the top of this page. For changes that materially affect your rights, we will provide additional notice ‚Äî such as an email to the address associated with your account.

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, your privacy rights, or Finnita’s data practices, contact us at:

Finnita Inc.
Email: support@finnita.com
Website: finnita.com

Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, without regard to its conflict-of-law principles.