www.clayrfi.ai
ClayrFi Privacy Policy
This Privacy Policy explains how ClayrFi, Inc. ("ClayrFi," "we," "us," or "our") collects, uses, discloses, retains, and protects personal and financial information when you visit www.clayrfi.ai (the "Site") or access or use the ClayrFi financial intelligence platform and associated software integrations, including our QuickBooks Online integration (collectively, the "Services"). This Privacy Policy applies to both our public marketing Site and the ClayrFi application itself — covering you whether you're a prospective visitor, an early access applicant, or an authenticated platform user connecting live financial data.
By visiting our Site or connecting your accounting software to ClayrFi, you acknowledge the processing practices described in this Privacy Policy. This Privacy Policy applies in addition to our Terms and Conditions.
1. Scope of This Policy
This Privacy Policy covers information collected:
- Directly from visitors on our Site (such as early access applicants and inquiries);
- Automatically from Site visitors through standard web technologies; and
- From authorized users and customer accounts accessing the ClayrFi web platform, including financial data accessed via third-party application programming interfaces (APIs), such as Intuit QuickBooks Online.
2. Information We Collect
We only collect information necessary to deliver, maintain, and improve our financial intelligence Services.
A. Information Provided Directly on the Site
When you apply for early access or submit forms on our Site, we collect:
- Contact details: First and last name, work email address;
- Professional details: Job title, company or firm name, company website; and
- Questionnaire responses: Details regarding your industry, revenue range, accounting systems, and financial challenges.
B. Intuit® QuickBooks Online and Accounting Integration Data
When you authorize ClayrFi to connect to your QuickBooks Online account via OAuth, we retrieve and process accounting and business data strictly to provide our platform functionality. This data includes:
- Company & Organization Details: Company name, address, tax configuration, and basic account settings;
- Financial Records: Chart of accounts, general ledger entries, invoices, bills, customer/vendor lists, bank transactions, and balance sheets; and
- Authentication Credentials: Secure OAuth access tokens and refresh tokens issued by Intuit. We never view, request, or store your Intuit account username or password.
C. Automatically Collected Technical Data
When you navigate the Site or Platform, we automatically collect basic technical metrics, including IP address, browser type, device details, operating system, and page interaction logs via cookies and standard web analytics.
3. How We Use Personal and Financial Data
We process your information strictly for specified operational and business purposes:
- Delivering Core Services: To process, analyze, and present financial intelligence insights, reporting dashboards, and forecasts within the ClayrFi application;
- Application & Onboarding: To review early access applications, schedule onboarding sessions, and communicate with prospective users;
- Platform Security & Reliability: To monitor infrastructure integrity, prevent unauthorized access, and troubleshoot application bugs; and
- Product Improvement: To analyze usage patterns on an aggregated, de-identified basis.
- QuickBooks Online
- API Connectivity: To maintain active synchronization between your QuickBooks Online account and the ClayrFi platform using secure access tokens;
- Minimum Necessary Access: We request only the QuickBooks Online API scopes required to deliver the specific features you use, and do not request broader access to your accounting data than is necessary for core platform functionality;
- Data Usage: We use data accessed through QuickBooks Online APIs solely to provide, support, and improve the core financial intelligence functions of the ClayrFi platform. We do not sell Intuit customer data, share it with third parties for cross-context behavioral advertising, or use QuickBooks data to train public AI/ML models.
4. How We Disclose Personal and Financial Data
We do not sell personal or financial information for monetary or other consideration. We disclose data only to trusted service providers (subprocessors) bound by strict confidentiality and data protection agreements, including:
- Cloud Infrastructure & Hosting: Enterprise cloud servers (Vercel, Supabase) that host our platform and encrypted databases;
- Customer Support & Communication: Operational platforms used to send transactional emails and manage support inquiries; and
- Analytics Providers: Web analytics tools (e.g., Google Analytics) used strictly to evaluate marketing site traffic.
We may also disclose information if required by law, subpoena, or legal process, or to enforce our legal rights and protect user safety. In the event of a merger, acquisition, or sale of company assets, customer data will remain subject to the commitments made in this Privacy Policy.
5. Data Retention, Disconnection, and Deletion
We retain data only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws.
Marketing & Site Applicants: Records from early access applications are retained for up to 24 months from your last meaningful interaction, unless you become an active customer.
Active Accounts: We store connected QuickBooks data and authorization tokens while your ClayrFi subscription remains active.
QuickBooks Disconnection & Account Termination: You can disconnect ClayrFi from your QuickBooks Online company at any time directly through Intuit Account Settings or within the ClayrFi application. Upon account termination or integration disconnection:
- We immediately invalidate and delete all stored OAuth access and refresh tokens; and
- All synchronized QuickBooks financial data is permanently deleted or anonymized from our active production databases within 30 days.
Backups: Deleted data may continue to exist for a limited time in encrypted backup copies, which are not used for any operational purpose and are not restored to production except for disaster recovery.
Data may also be retained beyond these windows where required by legal, tax, or accounting recordkeeping obligations.
6. Security Standards
ClayrFi implements robust administrative, technical, and physical safeguards designed to protect sensitive financial records and access credentials against unauthorized access, loss, or misuse:
- Data in Transit: All data transmitted between your browser, our servers, and Intuit APIs is encrypted using Transport Layer Security (TLS 1.2 or higher / HTTPS).
- Data at Rest: Secure access tokens are encrypted using industry-standard AES-256 encryption. Financial records stored within our databases are encrypted using AES-256 by our database provider.
- Access Controls: Access to production infrastructure and customer data is restricted to authorized ClayrFi engineering personnel under strict least-privilege principles and multi-factor authentication (MFA).
- Security Incident Notification: In the event of a security incident affecting your personal or financial information, ClayrFi will notify affected customers without undue delay and in accordance with applicable law.
While we employ enterprise-grade security protocols, no method of electronic transmission or cloud storage can guarantee 100% security.
7. International Data Transfers
ClayrFi's infrastructure and personnel currently operate within the United States. If we ever transfer personal or financial information across borders, we will implement appropriate safeguards required by applicable data protection laws, such as Standard Contractual Clauses or equivalent mechanisms, and will update this Privacy Policy accordingly.
8. Your Data Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data held by ClayrFi:
- Right to Know/Access: Request details about the personal data we collect, use, and disclose;
- Right to Correct: Request correction of inaccurate personal data;
- Right to Delete: Request permanent deletion of your personal data, subject to Section 5 above;
- Right to Opt-Out of Sale/Sharing: ClayrFi does not sell or share personal information for cross-context behavioral advertising;
- Right to Non-Discrimination: We will never discriminate against you for exercising your privacy or data rights.
Exercising Rights: You may request data access, correction, or deletion at any time by emailing us at [email protected]. We may take reasonable steps to verify your identity before fulfilling a request. We aim to respond within 45 days of a verified request, with a possible 45-day extension for complex requests, and we will notify you if an extension is needed.
9. Third-Party Links & Integrations
Our Site and Platform contain links to third-party services and integrations (including Intuit QuickBooks). This Privacy Policy applies solely to ClayrFi. We recommend reviewing the privacy statements of any third-party software you connect to our Services.
10. Children's Privacy
Our Services are designed exclusively for business representatives and adults. We do not knowingly collect personal information from children under 13 years of age.
11. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect legal, regulatory, or technical changes. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
12. Contact Information
For questions, concerns, or data deletion requests regarding this Privacy Policy or our data handling practices, please contact us at:
ClayrFi, Inc.
Attn: Privacy & Security Team
Email: [email protected]
Website: www.clayrfi.ai