Privacy Policy

This policy covers finmodelatlas.com. For a privacy question or request, use the contact form. Tell us which interaction your request concerns; do not send passwords, browser cookies or private report links.

External websites and merchant checkout have their own privacy notices. This policy does not describe the practices of an unrelated store or every service operated by our hosting providers.

The contact form collects your email address, selected topic, message and optional name. We use these details to understand your request and reply. Cloudflare handles email delivery to our contact inbox; received correspondence is handled by Google's Gmail service.

The form accepts text only. It does not subscribe you to a mailing list, send an automatic reply, or save a second copy of your message in the site's content database. Keep workbooks, reports, session links and confidential personal or financial information out of contact messages.

Correspondence remains in the email conversation; the form does not set an automatic mailbox-deletion timer. Contact us if you want to ask about a message or request its removal. We must consider the request and any applicable record-keeping obligations rather than promise instant deletion of every copy.

The break-even, company forecast and DCF calculators calculate scenarios in your browser. Their calculation code does not send your entered figures to our server or save them in browser local storage. Reloading or resetting a calculator restores its example inputs.

Ordinary page requests still reach the hosting service. This browser-only calculation boundary does not apply to a workbook you deliberately submit to Model Auditor or information you include in a contact message.

The Auditor page states whether uploads are available. When you choose to submit a workbook, its file content and filename are processed by the dedicated Auditor service to perform the supported spreadsheet checks. A workbook can contain worksheet names, formulas, saved values and other information; submit only material you are authorised to share.

The service stores a private report and scan metadata, including the filename and analysis timestamps. The online summary omits the detailed findings. An authorised PDF export retrieves the captured details for rendering in your browser. Downloaded PDFs are then under your control.

Original workbooks are temporary analysis inputs, not files kept in report history. The anonymous Auditor browser session lasts at most 24 hours. Report and scan-metadata access expires logically after 30 days, while session expiry can end your access sooner. Physical cleanup runs separately; these access limits are not a promise that every stored copy or provider backup is physically erased at that exact moment.

Resetting the browser session ends that session's access; it does not itself erase stored reports. Download a PDF while your owning session remains valid. For a privacy request, contact us without attaching the workbook or exposing session credentials.

Hosting and security services receive connection and request information, such as IP addresses and request metadata, to deliver pages and protect the service. The contact handler uses a hashed client-IP value for short rate-limit counters; it does not put your IP address into the email message.

Essential session cookies support authorised access. The anonymous Auditor uses a secure, HttpOnly browser-session cookie to associate private reports with the owning browser. Editor/admin authentication and Cloudflare access or security features can use separate cookies. Blocking or clearing essential cookies can end access to a private report or authenticated area.

Our public application code does not add advertising pixels or session-replay scripts. This does not mean hosting providers receive no operational data. Provider security logs and email records have separate handling from Auditor report expiry; we do not state a fixed provider-log retention period here.

Cloudflare hosts the site and its dedicated storage/analysis services. Cloudflare email delivery and Google's Gmail service handle contact correspondence. Their services may process information outside your country; EU storage placement does not establish EU-only processing. See Cloudflare's privacy information and Google's Privacy Policy for their respective services.

If a page offers a YouTube video, the embedded player is requested only after you select its load button. Loading it or following the watch link sends a request to YouTube/Google, whose privacy practices then apply. You can read the page without loading the player.

Check the product catalog and the relevant product page for current purchase availability. When a separately identified merchant checkout is available, its payment, order and privacy information must be shown there before you buy. Do not enter payment-card details in our contact form.

You can ask us about your information or request access, correction or deletion through the contact form. Depending on the law that applies, you may also have rights to restriction, objection, portability, withdrawal of consent where consent is the basis, and a complaint to the appropriate data-protection authority. These rights can have conditions and exceptions; contacting us does not require sending additional sensitive documents at the outset.

For an overview of EU rights where those rules apply, see the European Union's data protection and online privacy guidance. This link does not select a jurisdiction for every visitor.

The date above identifies this version. If data handling changes, the policy should describe the changed practice before it is introduced. You can contact us about a previous interaction as well as current use.