Privacy policy

What we collect

• Your business details and email address, which you enter on the intake form.
• Processing statements you choose to upload, and the figures we read from them. We keep only the last 4 digits of your merchant ID.
• Your choices: your score weights, the partner you choose and what you agreed to share.
• How you found us: if you arrived through a link with a referral or campaign code, we keep that code with your application. Otherwise, if another website sent you here, we keep that website's name (such as google.com), never the page you came from or what you searched for. A cookie holds it for up to 90 days until you apply.

How we use it

To audit your statements, match you with partners, show you results and, when you choose a partner and agree, refer you to that partner. Until you choose one, we may email you a few reminders that your results are waiting; each has a link to stop them, and if you use it we keep your address on a list so we send you no more.

Who processes it for us

• Anthropic reads uploaded statements through its API (Claude).
• Supabase stores our database and your uploaded files.
• Netlify hosts the website.
• Resend delivers our emails.
• Cloudflare Turnstile protects the intake form from bots.

Who we share it with

A partner receives your business profile, contact details and audit summary only after you choose that partner and agree. The referral link expires, can be revoked, and every access is logged.

How long we keep it

If a deal does not go ahead, we delete its statements and figures after 90 days. Our activity log keeps identifiers and dates, not your statements.

Security

Data is encrypted in transit and at rest; access is limited and logged. Our desk signs in with a password and an authenticator app.

Questions

Reply to any email from us and a person will answer.