This Privacy Policy explains how ClayrFi, Inc. ("ClayrFi," "we," "us," or "our") collects, uses, discloses, retains, and protects personal and financial information when you visit www.clayrfi.ai (the "Site") or access or use the ClayrFi financial intelligence platform and associated software integrations, including our QuickBooks Online integration (collectively, the "Services"). This Privacy Policy applies to both our public marketing Site and the ClayrFi application itself — covering you whether you're a prospective visitor, an early access applicant, or an authenticated platform user connecting live financial data.

By visiting our Site or connecting your accounting software to ClayrFi, you acknowledge the processing practices described in this Privacy Policy. This Privacy Policy applies in addition to our Terms of Use.

1. Scope of This Policy

This Privacy Policy covers information collected:

• Directly from visitors on our Site (such as early access applicants and inquiries);
• Automatically from Site visitors through standard web technologies; and
• From authorized users and customer accounts accessing the ClayrFi web platform, including financial data accessed via third-party application programming interfaces (APIs), such as Intuit QuickBooks Online.

2. Information We Collect

We only collect information necessary to deliver, maintain, and improve our financial intelligence Services.

A. Information Provided Directly on the Site

When you apply for early access or submit forms on our Site, we collect:

• Contact details: First and last name, work email address;
• Professional details: Job title, company or firm name, company website; and
• Questionnaire responses: Details regarding your industry, revenue range, accounting systems, and financial challenges.

B. Intuit® QuickBooks Online and Accounting Integration Data

When you authorize ClayrFi to connect to your QuickBooks Online account via OAuth, we retrieve and process accounting and business data strictly to provide our platform functionality. This data includes:

• Company & Organization Details: Company name, address, tax configuration, and basic account settings;
• Financial Records: Chart of accounts, general ledger entries, invoices, bills, customer/vendor lists, bank transactions, and balance sheets; and
• Authentication Credentials: Secure OAuth access tokens and refresh tokens issued by Intuit. We never view, request, or store your Intuit account username or password.

C. Automatically Collected Technical Data

When you navigate the Site or Platform, we automatically collect basic technical metrics, including IP address, browser type, device details, operating system, and page interaction logs via essential cookies and cookieless web analytics.

3. How We Use Personal and Financial Data

We process your information strictly for specified operational and business purposes:

• Delivering Core Services: To process, analyze, and present financial intelligence insights, reporting dashboards, and forecasts within the ClayrFi application;
• Application & Onboarding: To review early access applications, schedule onboarding sessions, and communicate with prospective users;
• Platform Security & Reliability: To monitor infrastructure integrity, prevent unauthorized access, and troubleshoot application bugs; and
• Product Improvement: To analyze usage patterns on an aggregated, de-identified basis.
• QuickBooks Online
  • API Connectivity: To maintain active synchronization between your QuickBooks Online account and the ClayrFi platform using secure access tokens;
  • Minimum Necessary Access: We request only the QuickBooks Online API scopes required to deliver the specific features you use, and do not request broader access to your accounting data than is necessary for core platform functionality;
  • Data Usage: We use data accessed through QuickBooks Online APIs solely to provide, support, and improve the core financial intelligence functions of the ClayrFi platform. We do not sell Intuit customer data, share it with third parties for cross-context behavioral advertising, or use QuickBooks data to train public AI/ML models.

4. How We Disclose Personal and Financial Data

We do not sell personal or financial information for monetary or other consideration. We disclose data only to trusted service providers (subprocessors) bound by strict confidentiality and data protection agreements, including:

• Cloud Infrastructure & Hosting: Enterprise cloud servers (Vercel, Supabase) that host our platform and encrypted databases;
• Customer Support & Communication: Operational platforms used to send transactional emails and manage support inquiries; and
• Analytics Providers: Cookieless web analytics (Cloudflare Web Analytics) used strictly to evaluate marketing site traffic in aggregate.

We may also disclose information if required by law, subpoena, or legal process, or to enforce our legal rights and protect user safety. In the event of a merger, acquisition, or sale of company assets, customer data will remain subject to the commitments made in this Privacy Policy.

5. Data Retention, Disconnection, and Deletion

We retain data only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws.

Marketing & Site Applicants: Records from early access applications are retained for up to 24 months from your last meaningful interaction, unless you become an active customer.

Active Accounts: We store connected QuickBooks data and authorization tokens while your ClayrFi subscription remains active.

QuickBooks Disconnection & Account Termination: You can disconnect ClayrFi from your QuickBooks Online company at any time directly through Intuit Account Settings or within the ClayrFi application. Upon account termination or integration disconnection:

• We immediately invalidate and delete all stored OAuth access and refresh tokens; and
• All synchronized QuickBooks financial data is permanently deleted or anonymized from our active production databases within 30 days.

Backups: Deleted data may continue to exist for a limited time in encrypted backup copies, which are not used for any operational purpose and are not restored to production except for disaster recovery.

Data may also be retained beyond these windows where required by legal, tax, or accounting recordkeeping obligations.

6. Security Standards

ClayrFi implements robust administrative, technical, and physical safeguards designed to protect sensitive financial records and access credentials against unauthorized access, loss, or misuse:

• Data in Transit: All data transmitted between your browser, our servers, and Intuit APIs is encrypted using Transport Layer Security (TLS 1.2 or higher / HTTPS).
• Data at Rest: Secure access tokens are encrypted using industry-standard AES-256 encryption. Financial records stored within our databases are encrypted using AES-256 by our database provider.
• Access Controls: Access to production infrastructure and customer data is restricted to authorized ClayrFi engineering personnel under strict least-privilege principles and multi-factor authentication (MFA).
• Security Incident Notification: In the event of a security incident affecting your personal or financial information, ClayrFi will notify affected customers without undue delay and in accordance with applicable law.

While we employ enterprise-grade security protocols, no method of electronic transmission or cloud storage can guarantee 100% security.

7. International Data Transfers

ClayrFi's infrastructure and personnel currently operate within the United States. If we ever transfer personal or financial information across borders, we will implement appropriate safeguards required by applicable data protection laws, such as Standard Contractual Clauses or equivalent mechanisms, and will update this Privacy Policy accordingly.

8. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data held by ClayrFi:

• Right to Know/Access: Request details about the personal data we collect, use, and disclose;
• Right to Correct: Request correction of inaccurate personal data;
• Right to Delete: Request permanent deletion of your personal data, subject to Section 5 above;
• Right to Opt-Out of Sale/Sharing: ClayrFi does not sell or share personal information for cross-context behavioral advertising;
• Right to Non-Discrimination: We will never discriminate against you for exercising your privacy or data rights.

Exercising Rights: You may request data access, correction, or deletion at any time by emailing us at [email protected]. We may take reasonable steps to verify your identity before fulfilling a request. We aim to respond within 45 days of a verified request, with a possible 45-day extension for complex requests, and we will notify you if an extension is needed.

9. Third-Party Links & Integrations

Our Site and Platform contain links to third-party services and integrations (including Intuit QuickBooks). This Privacy Policy applies solely to ClayrFi. We recommend reviewing the privacy statements of any third-party software you connect to our Services.

10. Children's Privacy

Our Services are designed exclusively for business representatives and adults. We do not knowingly collect personal information from children under 13 years of age.

11. Cookies

ClayrFi uses only cookies that are strictly necessary for the Site and Services to function. We do not use advertising, tracking, or third-party analytics cookies.

• Essential cookies: Used to keep you signed in to the ClayrFi application, maintain session security, and remember basic preferences. These cannot be switched off without breaking core functionality.
• Analytics: We measure Site traffic with Cloudflare Web Analytics, which does not use cookies, store identifiers on your device, or track you across other websites.

Because we do not set non-essential cookies, we do not display a cookie consent banner. If this changes, we will update this section and request your consent where required by law.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, regulatory, or technical changes. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Contact Information

For questions, concerns, or data deletion requests regarding this Privacy Policy or our data handling practices, please contact us at:

ClayrFi, Inc.
Attn: Privacy & Security Team
Email: [email protected]
Website: www.clayrfi.ai