Privacy Policy

1. Information We Collect

• Account and profile information: name, email address, phone number, and role-based access credentials for firm users.
• Client business information: company names, entity types, federal EINs, state tax and franchise numbers, addresses, and contact details.
• Client financial information: financial statements and transaction data pulled from connected QuickBooks Online accounts or data sheets, invoices, billing records, and financial reports.
• Tax information: tax returns, tax years, amounts due or refunded, estimated payments, and related tax documents.
• Identity information: for individual clients, Social Security numbers, IP PINs, spouse/dependent details, and dates of birth, collected as needed to provide tax and accounting services.
• Documents and signatures: documents you or we upload, and electronic signature records including signer name, email, IP address, device information, and timestamps.
• Communications: messages exchanged through the App, firm email accounts connected to the App, and SMS text messages (e.g., appointment reminders and responses). Message content and phone numbers are processed to provide these communications.
• Usage information: pages viewed, features used, and actions taken within the App.

2. How We Use Information

We use the information above to provide accounting, tax, and CFO services; manage client relationships and engagements; send proposals and agreements; obtain electronic signatures; schedule and manage appointments; send communications, including by SMS; sync and report on financial data; meet legal, tax, and professional obligations; and operate, secure, and improve the App.

3. QuickBooks Online and Other Integrations

When you (or your firm, acting with your authorization) connect a QuickBooks Online account, we access that company's financial data via Intuit's API subject to Intuit's terms and the permissions you grant. We only access the QuickBooks file of the client whose record the connection is attached to, and access can be revoked at any time by disconnecting the integration. We may also connect Google Workspace, Microsoft 365, and Google Sheets integrations for document storage and data sync, each subject to the provider's terms.

4. Access Controls

Access to client data within the App is restricted to firm personnel who have been granted access to that specific client. We do not share one client's data with other clients.

5. Sharing With Third Parties

We share information only with: service providers that host and operate the App (including Base44, Intuit (QuickBooks), Google, Microsoft, and Twilio for SMS delivery), each bound by their own privacy and security obligations; professional advisors and auditors where required; and law enforcement or regulators where required by law or valid legal process. We do not sell personal information.

6. SMS Communications

By providing a phone number, you consent to receive service-related text messages from us. Message frequency varies. Reply STOP to opt out or HELP for help at any time. Message and data rates may apply. We retain phone numbers and SMS content to respond to you and to comply with our SMS program registrations.

7. Data Retention

We retain client information for as long as needed to provide services and to satisfy legal, tax, and professional record-keeping obligations, after which we delete or de-identify it unless a longer retention period is required by law.

8. Security

We use technical and organizational safeguards to protect information, including encryption in transit and at rest, role-based access controls, row-level data isolation, and audit logging of sensitive data access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

You may request access to, correction of, or deletion of your personal information, subject to our legal and professional record-keeping obligations, by contacting us below. If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information and to not be discriminated against for exercising those rights.

10. Children

The App is not directed to children under 13, and we do not knowingly collect their personal information.

11. Changes to This Policy

We may update this Privacy Policy and will post the new version with an updated date in the App. Material changes will be communicated to active users.

12. Contact Us

Questions about this policy: model2cfo@gmail.com.