Privacy Policy

Information you give us

When you fill in the assessment or contact form, we collect your name, company or firm, email address, an optional phone number, and what you write in the message or “What would you like to improve?” field. Some pages also ask how you’re exploring this (business owner, portfolio team or company leader) or which QuickBooks version you use.

We use it to reply, schedule your assessment and prepare for the conversation. Form submissions reach our team by email, delivered through Resend.

Information collected automatically

• Campaign details. When you arrive from an ad or a link we sent, we keep its campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), ad click identifiers (gclid, li_fat_id), the page that referred you and the page you landed on. They stay in your browser’s session storage for that visit and are sent along with any form you submit.
• Analytics. We use PostHog to see how the site is used: pages viewed, buttons clicked, sections viewed and forms submitted. PostHog’s session replay records interactions such as scrolling and clicks so we can find what’s confusing. Text typed into form fields is masked and never recorded. Analytics requests go through our own domain. If your browser sends a Do Not Track signal, analytics doesn’t run.
• LinkedIn Insight Tag. When it’s enabled, LinkedIn’s tag measures visits from our LinkedIn ads and conversions such as form submissions. LinkedIn may set cookies and uses this data under its own privacy policy.
• Hosting logs. Vercel, which hosts the site, keeps standard server logs (IP address, browser, pages requested) for security and reliability. We also use your IP address briefly to limit repeated form submissions.

How we use information

• To reply to you, schedule your assessment and prepare for it.
• To understand which pages and campaigns lead to conversations, and improve the site.
• To keep the site and our forms secure.

We don’t sell personal information, and we don’t use form submissions or website analytics to train AI models.

Cookies and similar technologies

PostHog and the LinkedIn Insight Tag may store identifiers in cookies or local storage. Campaign details live in session storage and clear when you close the tab. You can block cookies in your browser settings; the site works without them.

Business data in an engagement

When your company works with us, we connect the systems you choose, such as QuickBooks, Gmail, Google Drive and Excel files, to build your company’s business record on our platform. Your engagement agreement governs that work. In short:

• Your company owns its data and its business record.
• Connections are read-only unless you approve an action that writes back, such as an approved purchase order.
• Data is stored in Google Cloud (us-central1), encrypted at rest (AES-256) and in transit (TLS 1.2 or later). Connection credentials are encrypted before they’re stored.
• Each company’s data is kept separate from every other customer’s.
• We don’t use your data to train AI models, and we don’t sell or share it.

Subprocessors that may handle engagement data: Google Cloud Platform (hosting and storage); Google APIs for Gmail and Drive (the accounts you connect); Intuit QuickBooks (connected accounting data); Anthropic and OpenAI (AI models); Voyage AI (search indexing, with data retention and training turned off); Reducto (document parsing).

Google user data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Gmail and Drive access is read-only: we never send, change, label or delete mail, and never create, change or delete files. Google user data is used only to provide the features you use, isn’t used for advertising, isn’t used to train general AI models, and isn’t read by a person except with your agreement, for security, or as the law requires.

When you disconnect a source, we revoke and delete its stored credentials right away and purge the data we extracted from it within 30 days. When an engagement ends, your company’s data is deleted within 30 days unless you ask us to keep the platform running or to export it first.

How long we keep website information

We keep form submissions for as long as we need them to follow up and for our business records. Analytics data is kept no longer than 24 months.

Your choices and rights

You can ask us to show you, correct or delete the personal information we hold about you. Depending on where you live, you may have further rights under local law, such as the right to opt out of the sale of personal information; we don’t sell it.

Children

This site is for businesses and isn’t directed to children under 16.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page.