Privacy Policy

What we collect

Your name, email and phone number; the business details you enter (legal name, EIN, address, how the business is taxed); the statements you upload or connect; your answers; and technical logs of sign-ins and actions in the app.

Why

To keep your books, to sign you in safely, to bill you, to answer your questions, and to make GRAI classify better over time. We do not sell your data and we do not use it for advertising.

Who touches it

Render (hosting, United States), Cloudflare (encrypted backups), Stripe (payments; we never see or store your card number), Twilio (sign-in texts), Google Workspace (email), and Plaid when you connect a bank. Each one only for its job.

How it is protected

Encrypted in transit and at rest. EIN and phone numbers are encrypted with a separate key. Backups are encrypted before they leave the server. Access to production is limited to the operator and is reviewed every quarter. No passwords exist to be stolen: sign-in is by email link and a texted code.

How long

For as long as you have an account, plus what the law requires for billing records. When you delete your account, your statements and answers are removed immediately and fall out of backups on their normal schedule.

Your rights

See, download, correct or delete your data at any time from the app. Questions to contact@graistrategies.com.

Children

GRAI is for business owners and is not for anyone under 18.

Changes

We post changes here and, for material changes, tell you by email or at sign-in.