Findly

GDPR overview

Findly makes no GDPR compliance claim. The regulation is named once across the site and the product documentation, in the documentation FAQ, which states that Findly is pursuing SOC 2 compliance and GDPR-readiness, to meet enterprise needs — an objective in progress, not a declared conformity. No Article 27 EU representative is designated, no data processing agreement is published or offered, no sub-processor list exists, and no hosting country or region is disclosed. The publisher, Conversion Pattern Inc., is a Delaware company and the terms are governed by United States law before Delaware courts; the Findly UK Limited entity shown in the footer is not an establishment in the European Union. Data subject rights are nevertheless open in practice: the privacy policy grants access, correction and deletion of personal information, exercised at privacy@findly.ai.

Who owns the data?

Findly's privacy policy leaves personal data with the individual: users have the right to access, edit or delete their personal information from the platform, conversation history can be removed at any time, and requests go to privacy@findly.ai. On business data, the Services page states that your data remains on your server, maintaining the privacy and integrity of your valuable information. The terms take the opposite line on the software itself: the site, the service and their content remain the intellectual property of Findly and its licensors. In short, you keep your data and your account record, while the publisher, Conversion Pattern Inc., keeps the platform.

Reuse rights

Findly's terms reserve intellectual property in the site and the service to Findly and its licensors. What the platform produces, by contrast, is built to travel: results can be visualised, exported in several formats, shared publicly and pushed into scheduled email, Slack or Microsoft Teams reports. On Findly's side, the privacy policy states that customer and provider data is never used to train AI models, and that datasets are not retained, stored or combined for any form of AI training or algorithm improvement. All processing is strictly limited to delivering the requested service functionalities unless the customer authorises more in writing. Data reaches Slack only when the user switches that integration on, and only to the extent the connected service requires. Personal information is not sold to third parties, and Google Analytics is used for website audience measurement.

Data retention & training

Hosting summary

Findly discloses no hosting country and no hosting region. Two product statements bear on the question: the Services page says that customer data remains on the customer's own server, and the documentation FAQ answers the question of private data access with "No, Findly uses a secure and scalable architecture to ensure data security and compliance." An on-premise deployment option appears in the pricing table, reserved for the Enterprise plan. The publisher, Conversion Pattern Inc., is established in the United States (Delaware), with a separate British entity, Findly UK Limited, in London, and the terms are governed by United States law. The domain resolves to an anycast IP address allocated to Amazon, which reflects the website's delivery infrastructure rather than any statement about where product data is stored. In practice, buyers with data residency requirements have nothing published to work from: no region, no country, no sub-processor list and no data processing agreement. Those points have to be obtained directly from the vendor.