Privacy policy

Last updated November 7, 2026. FI Investment Tracker is operated by Granite Hall Solutions LLC ("Granite Hall Solutions," "we," or "us"), the data controller responsible for this policy. The product is designed so customer investment portfolio data stays in the customer-controlled environment.

Data custody model

FI Investment Tracker is downloadable desktop software for banks and credit unions. The product is designed so investment holdings, source import files, report packages, workpapers, and local backups remain on the customer's workstation, server, or other customer-controlled storage. The website, checkout, license, and support systems should not be used to upload portfolio files.

Information we may collect

We may collect account, billing, license, download, activation, support, security, and operational metadata. This can include institution name, billing contact, email address (our servers keep only a hash of it; Stripe holds the address), plan, subscription status, Stripe customer, subscription, checkout session, charge, and payment identifiers, license identifier, the license key and a hashed copy of it, activation count, hashed machine activation identifier, app version, validation timestamps, the IP address and user agent recorded in security logs, support messages, and security review requests.

Online loan applications

Online Loan Applications is not yet available. When it is offered and a financial institution enables it, the hosted borrower link may collect application information, contact information, requested loan details, uploaded documents, E-SIGN consent evidence, electronic signature evidence, device/browser metadata, document hashes, malware scan status, and audit records. This borrower intake service will be separate from the local-only investment portfolio custody model.

Payment information

Payments are processed through Stripe-hosted checkout and customer portal pages. FI Investment Tracker does not store raw card numbers, bank account numbers, or payment credentials. Stripe may process payment method details, billing information, fraud checks, invoices, receipts, tax information, and subscription status according to Stripe's own terms and privacy practices.

How information is used

We use collected information to provide checkout, license activation, subscription administration, download fulfillment, customer support, security review materials, product updates, fraud prevention, abuse prevention, legal compliance, and service communications. We do not sell customer investment data, and the launch model is built to avoid receiving it in the first place.

Disclosure

We may share limited information with service providers that help operate payment, licensing, website hosting, email, support, security, analytics, and compliance workflows. We may also disclose information when required by law, to protect the product or customers, or as part of a business transfer. Customer portfolio files should not be sent to support.

Security practices

The product separates customer portfolio custody from billing and licensing. We use hosted payment pages, signed license responses, release checksums, access controls, and operational logging for the systems we operate. When Online Loan Applications is offered, borrower upload and signature steps will require a secure access link, documents will be validated and encrypted before storage, and uploaded files will be scanned for malware before they are accepted. Customers remain responsible for protecting their own workstations, servers, backups, import files, report packages, and internal user access.

Retention and choices

We retain account, billing, license, support, and borrower-application records as needed to provide the service, comply with legal obligations, resolve disputes, and maintain security. Borrower application records, uploaded documents, signature evidence, audit records, and export packets may be subject to institution-defined retention, legal hold, and regulatory requirements. Customers may contact support to request access, correction, or deletion of eligible records, subject to legal, billing, security, lending, and audit retention requirements.

Contact

This service is operated by Granite Hall Solutions LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702. Privacy, support, and billing questions can be sent to [email protected]. Security-specific questions can be sent to [email protected].