Privacy Policy

Fifth Legion LLC (“Fifth Legion,” “we,” “us”) provides fractional CFO and financial advisory services to companies. This policy explains what information we collect through our website at fifth-legion.com, our client portal (principales.fifth-legion.com) and our internal tools (together, the “Services”), how we use it, and the choices you have.

1. Information we collect

Information you give us

• Inquiries. When you contact us through our website, we collect your name, email address, company and any message you send.
• Account information. Access to the client portal is by invitation only. We collect your name, email address, the company or companies you are associated with, your role, and the sign-in methods you set up (such as a password, which is stored only in hashed form by our authentication provider, and an authenticator app for two-step verification).
• Client data. Our clients provide financial and corporate information for us to deliver our services, which may include financial statements, forecasts, capitalization tables, and information about shareholders, option holders, employees or investors (such as names, contact details and equity holdings), along with related documents.

Information from sign-in providers

If you choose to sign in with Google or Microsoft, we receive your name, email address and whether that email address is verified. We request only these basic profile details and do not access your email, files, contacts or calendar.

Information collected automatically

• Security and activity records. We record sign-in times and a log of significant account actions (for example, invitations, permission changes and ownership transfers) to protect accounts and investigate misuse. Our hosting and authentication providers also process technical data such as IP addresses and browser information to operate and secure the Services.
• Cookies. We use a single essential cookie to keep you signed in, and our authentication provider may store sign-in state in your browser while you sign in. We do not use advertising cookies, and we do not use third-party analytics or tracking on the Services.

2. How we use information

• To provide, maintain and support the Services and the professional services our clients engage us for.
• To authenticate users, enforce two-step verification, control access by role, and keep the Services secure.
• To send service messages such as invitations, access notices and security notifications.
• To respond to inquiries and communicate with prospective clients.
• To comply with legal obligations and enforce our agreements.

We do not sell personal information, we do not share it for targeted advertising, and we do not use client data to train machine-learning or AI models.

3. Client data and our role

When a client company provides information about other people, such as its shareholders or employees, we process that information on the client's behalf and under its instructions, as its service provider. The client is responsible for having the right to share that information with us. If your information is held in a client's workspace and you have questions, please contact that company; we will assist them in responding.

4. How we share information

We share information only as follows:

• Within your company's workspace. Information in a company's workspace is visible to the users that company authorizes, according to their roles, and to Fifth Legion personnel who work on that engagement.
• Service providers who process data for us under contractual confidentiality and security obligations: Google Cloud and Firebase (hosting, database and authentication), Resend (transactional email), and Google Workspace (our own email).
• Sign-in providers you choose to use (Google or Microsoft), to the extent needed to authenticate you.
• Legal and safety. When required by law, subpoena or other legal process, or when necessary to protect the rights, property or safety of Fifth Legion, our clients or others.
• Business transfers. In connection with a merger, acquisition or sale of assets, subject to this policy's protections.

5. Google user data

Fifth Legion's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data only to authenticate you and identify your account.

6. Security

We protect information with encryption in transit (TLS) and at rest, invitation-only accounts, required two-step verification, role-based access controls, and audit logging. No system is perfectly secure; please keep your sign-in methods and authenticator device secure and tell us promptly if you suspect unauthorized access.

7. Retention

We keep account information while your account is active and client data for the duration of our engagement and as long as needed to meet legal, tax, accounting and professional obligations or resolve disputes. Inquiry information is kept as long as needed to respond and follow up. We then delete or de-identify it. Clients may request return or deletion of their data at the end of an engagement, subject to those obligations.

8. Your choices and rights

You can update your name from your profile in the portal. Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, and to opt out of certain processing. To make a request, email privacy@fifth-legion.com. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

9. Where information is processed

We are based in the United States, and information is stored and processed in the United States by us and our service providers.

10. Children

The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new effective date and, for material changes, notify account holders by email or in the Services.

12. Contact us

Fifth Legion LLC
privacy@fifth-legion.com