Privacy Policy

1. Data We Collect

Business Financial Data (for Services):

• Bank and credit card transactions
• Accounting records (QuickBooks Online, Xero, FreshBooks)
• Invoices, receipts, contracts (from email and cloud storage such as Drive)
• Communication history (Gmail, Slack, WhatsApp for collections)

Account Data:

• Business name, EIN/tax ID, contact information
• Billing and payment details

Usage Data:

• Interactions with Wise AI
• Device and browser information, IP address

2. How We Use Data

• Deliver Services: automate reconciliation, categorization, reporting, and invoice chasing.
• Improve AI: use aggregated and anonymized data to train Wise (no individual business data is exposed).
• Compliance: CPA review and audit trails.
• Communications: service updates and billing.
• Security: fraud detection and access logs.

3. Data Sharing

We never sell your data.

We share data only with:

• Service Providers: Plaid (banks), AWS (hosting), Stripe (payments), and accountants (review).
• Legal Authorities: only when required by law (e.g., subpoena or audit).
• Business Transfers: in a merger or acquisition, subject to the same or equivalent privacy protections.

4. Security

• Data encrypted in transit (TLS 1.3) and at rest (AES-256).
• SOC 2 Type II compliant controls.
• Strict access controls and audit logs.
• Annual penetration testing.

5. Retention

• We delete active data within 30 days of cancellation (backups retained for up to 90 days).
• Financial records are retained for 7 years for compliance and may be anonymized thereafter.

6. Your Rights

• Access: request a data export at any time.
• Delete: request erasure of your data (subject to legal retention requirements).
• Correct: update inaccurate information.
• Opt-Out: unsubscribe from marketing emails at any time.

We comply with GDPR and CCPA where applicable. Contact privacy@profitwise.com for requests.

7. International Transfers

Data may be stored in the US or EU. Singapore operations rely on Standard Contractual Clauses and equivalent safeguards for cross-border transfers.

8. Children's Privacy

Our Services are not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We may update this Privacy Policy from time to time. Continued use of the Services after updates constitutes acceptance of the revised policy.