Privacy Policy

Data we collect

We collect two categories of data: account data that identifies you, and company data that you upload or connect for analysis.

• Account data: name, email address, authentication identifiers and workspace membership.
• Company data: financial documents, transactions, ledgers and any records you upload or connect.
• Usage data: pages visited, features used and error diagnostics, used to operate and improve the service.

How we use it

Account data is used to authenticate you and control access. Company data is used exclusively to produce the analysis you request inside your own workspace. Usage data is used to keep the service reliable.

We do not sell personal or company data, and we do not share it with advertisers.

AI processing

When you ask a question, relevant extracts of your company data may be sent to a language model provider to generate an explanation. Financial figures themselves are computed by our own systems, not by the model.

Your data is not used to train shared or third-party models. Model providers process data under contract and are not permitted to retain it for training.

Storage and security

Data is encrypted in transit and at rest. Every record is scoped to a company and protected by database-level access policies, so one customer's queries cannot return another customer's data.

Access is further restricted by role, and privileged actions are recorded in an immutable audit log.

Retention

Company data is retained while your workspace is active. When a workspace is deleted, its data is removed from primary systems within 30 days and from backups within 90 days.

Free plans may have a shorter history window, described on the pricing page.

Your rights

Depending on your jurisdiction you may have the right to access, correct, export or delete your personal data, and to object to certain processing.

• Access and export: request a copy of your account and company data.
• Correction: update inaccurate account details at any time from your profile.
• Deletion: delete a workspace, or request full account deletion.
• Objection and restriction: contact us to limit specific processing.

Cookies

We use strictly necessary cookies for authentication and session management, and privacy-respecting analytics to understand aggregate usage. We do not use advertising cookies.

Contact

For privacy questions or to exercise any of the rights above, contact privacy@nanofora.com. We respond within 30 days.