Privacy Policy

What we collect

Your name, email and phone number; the business details you enter (legal name, EIN, address, how the business is taxed); the statements you upload or connect; your answers; and technical logs of sign-ins and actions in the app.

Why

To keep your books, to sign you in safely, to bill you, to answer your questions, and to build GRAI's own vendor library (which merchant is which) so classification improves. Your data is not used to train any AI model, by us or by the AI provider we use. We do not sell your data and we do not use it for advertising.

Who touches it

Render (hosting, United States), Cloudflare (encrypted backups), Stripe (payments; we never see or store your card number), Twilio (sign-in texts), Google Workspace (email), and Plaid when you connect a bank. Each one only for its job.

How it is protected

Encrypted in transit and at rest. EIN and phone numbers are encrypted with a separate key. Backups are encrypted before they leave the server. Access to production is limited to the operator and is reviewed every quarter. No passwords exist to be stolen: sign-in is by email link and a texted code.

How long

For as long as you have an account, plus what the law requires for billing records. When you delete your account, your statements and answers are removed immediately and fall out of backups on their normal schedule.

Your rights

See, download, correct or delete your data at any time from the app. Questions to contact@graistrategies.com, or by mail to GRAI Strategies, 5155 Blue Diamond Road, Suite 102, PMB 1208, Las Vegas, NV 89139.

Children

GRAI is for business owners and is not for anyone under 18.

Changes

We post changes here and, for material changes, tell you by email or at sign-in.