Last updated: October 9, 2026
We collect information you provide directly to us, including your name, email address, and company information when you create an account.
When you connect QuickBooks Online or Xero, we read your financial data to provide analytics and reporting. This includes:
We also write to your accounting system, but only to carry out actions you or your team direct in the platform, or set up to run on a schedule — for example, posting a journal entry you approve, creating an invoice or bill, sending a recurring invoice you scheduled, recording a payment, or applying a books cleanup you have authorized. We do not make changes to your books on our own initiative. You can revoke this access at any time by disconnecting the integration in the platform or from QuickBooks or Xero directly.
You may choose to connect a bank account so that money in and money out appear alongside the rest of your financial reporting. Bank connections are optional, and the platform works without one.
Bank account data is retrieved through a regulated third-party bank data provider. We currently use Plaid. You authenticate directly with your bank or with the provider; we never see, receive, or store your online banking username or password. When you connect an account we receive:
Access is read-only. The platform has no ability to move, transfer, or withdraw money through the provider, and no such permission is requested.
Nothing is applied to your reports automatically. Incoming transactions enter a review queue and appear in your financial reporting only after you have reviewed and categorized them. Transactions you mark as personal are excluded entirely and are never included in any calculation or report.
We do not sell, rent, or share your bank data. It is not used for advertising or marketing, and it is not used for lending, credit decisioning, underwriting, insurance, employment or tenancy screening, or any automated decision-making about you. It is used solely to produce financial reporting for the business that connected the account, at that business's direction.
The credential that lets us retrieve your transactions is held server-side only. It is never sent to a browser, never written to logs, and cannot be read through our application interface by any signed-in account, including our own staff accounts.
You can disconnect a bank account at any time from within the platform, which revokes our access at the provider. On disconnection we stop retrieving new transactions, and the stored bank data is deleted within 30 days.
We use the information we collect to:
We implement industry-standard security measures to protect your data, including:
We do not sell, trade, or rent your personal information to third parties. We do not use your data for advertising, and we do not use it for lending, credit decisioning, underwriting, or any automated decision-making about you. We share data only with the service providers who operate the platform on our behalf — hosting, database, accounting, banking, and communication providers — each bound by confidentiality obligations and permitted to use the data only to provide their service to us. We may also disclose data where required by law.
You have the right to:
We retain your data for as long as your account is active or as needed to provide services, and for such period afterwards as is required for legal, tax, and accounting purposes. Upon account deletion, your data will be permanently deleted within 30 days. Bank data is deleted within 30 days of the account being disconnected or your account being deleted, whichever comes first.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
If you have questions about this Privacy Policy, please contact us at:
Email: support@iamcfo.com
Website: www.iamcfo.com