Privacy Policy

Last updated: November 3, 2026

FinCrime Studio is a financial crime training site run by DeMarqus Payne, based in Portugal. This page explains what we collect, why, who else handles it, and what you can ask us to do with it. Questions go to privacy@fincrimelab.com.

Practice data only

Every case on this site is fictional. Never enter real customer names, account details, or other information from your job. Your answers are stored and sent to an AI service for grading, so anything you type should be practice material only.

What we collect

• Your account: your email address, your role (tester or admin), and, if you set one, a password. Passwords are stored in scrambled (hashed) form by our sign-in provider; we can't read them.
• Your training work: the cases you open, your answers (red flags, decisions, narratives), your drill answers, and the scores and feedback they receive.
• Feedback you send us: the message, the page you sent it from, and your email address.
• Access requests: if you ask to join the beta, your email address and anything you tell us about your role or what you'd like to practice.
• Usage records: how much AI processing your activity used, so we can keep costs fair and limit heavy use.

We don't use advertising or tracking tools. The only cookies we set are the ones that keep you signed in.

How we use it

• To sign you in and run your account.
• To grade your work and show you your results and progress.
• To improve the training. We may review submissions to check that cases and grading are fair, and to spot common mistakes. If we ever use an example publicly, it will be anonymized.
• To reply to your feedback and access requests, and send emails about your account, such as sign-in links.

We don't sell your data or share it for marketing.

Who else handles it

We use a few service providers to run the site. They process data on our behalf:

• Supabase: our database and sign-in provider. Stores your account and training work, and sends sign-in emails.
• Vercel: hosts the website.
• Anthropic: the AI service that writes cases and grades answers. Your answers are sent to it for grading. Under its commercial terms, Anthropic does not use this data to train its models.

These providers may store data in the United States or other countries. When data leaves the European Economic Area, they protect it with the safeguards the law requires, such as standard contractual clauses.

How long we keep it

We keep your account and training work while your account is active. If you ask us to delete your account, we delete your account and training work within 30 days. Usage records with no link to you may be kept for cost tracking.

Your rights

Under the EU General Data Protection Regulation (GDPR), and similar laws elsewhere, you have the right to see the data we hold about you, correct it, get a copy, object to how we use it, or have it deleted. Email privacy@fincrimelab.com and we'll respond within 30 days. If you're unhappy with our answer, you can complain to a data protection authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), or the authority where you live.

Security

Access to the database is limited to the site itself and its operator. Data is encrypted in transit, and passwords are never stored in readable form.

Changes

If we make a significant change to this policy, we'll update the date above and tell members by email.