Privacy Policy

1. Categories of Personal Data Collected

We collect the following categories of personal data:

• Account Information: Email address, password (hashed), and account creation date
• Authentication Data: OAuth tokens, session identifiers, and authentication credentials
• Financial Data: Entity information, accounts, journal entries, transactions, contacts, and related financial records
• Usage Data: Interaction logs, feature usage, and system activity
• Device Information: IP address, browser type, device identifiers, and operating system information

2. Purposes of Use

We use your personal data for the following purposes:

• Service Provision: To provide and maintain our accounting and financial management services
• Authentication and Security: To authenticate users, prevent fraud, and ensure account security
• Improvement and Optimization: To analyze usage patterns and improve our services
• Communication: To send account-related notifications and respond to support requests
• Compliance: To comply with legal obligations and enforce our terms of service

3. Categories of Recipients

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party services that help us operate our platform (e.g., hosting, email delivery, analytics)
• AI Platforms: When you use our MCP integration with ChatGPT or other AI platforms, relevant financial data may be shared to enable the service
• Legal Authorities: When required by law or to protect our rights and the rights of our users
• Business Transfers: In the event of a merger, acquisition, or sale of assets

4. User Controls and Rights

You have the following controls and rights regarding your personal data:

• Access: You can access your personal data through your account settings
• Correction: You can update and correct your personal data at any time
• Deletion: You can request deletion of your account and associated data by contacting support
• Data Export: You can export your financial data through the dashboard
• Consent Withdrawal: You can revoke OAuth permissions at any time through your settings
• Communication Preferences: You can manage email notification preferences in your account settings

5. Data Security

We implement industry-standard security measures to protect your personal data, including encryption, secure authentication, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:

Email: pranav@recursive.so

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.