Privacy Policy

We collect three categories of data:

• Account data — name, work email, organization name, and authentication identifiers.
• Connected financial data — payments, payouts, refunds, disputes, invoices, subscriptions, customers, balance transactions and bank transactions retrieved from providers you explicitly connect (for example Stripe or your bank aggregator).
• Product telemetry — page and feature usage, error reports, and AI request metadata (model, token counts, latency, cost). We do not store AI prompt contents containing raw customer PII in telemetry.

• To compute analytics, metrics and reconciliation results in your workspace.
• To generate AI explanations and summaries about data already in your workspace.
• To secure the service, detect abuse, and meet legal obligations.
• To bill you and provide support.

We do not sell personal data, and we do not use your financial data to train foundation models.

Provider credentials and OAuth tokens are encrypted at rest and are never returned to the browser. Access is restricted to server-side processes that act on behalf of your workspace.

Every record is scoped to an organization and enforced with row-level security in the database. Members can only read data belonging to organizations they are a member of.

Synced financial data is retained while your workspace is active. You can disconnect an integration at any time, which stops future syncs. On written request we delete workspace data within 30 days, except records we must retain for legal, tax or fraud-prevention purposes.

We rely on a small set of vendors to operate the service. The current list is published on our subprocessors page.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us and we will respond within 30 days.

Privacy questions: privacy@stripepilot.com.