Privacy Policy

Last updated: October 22, 2026. FiscalIQ LLC, a Texas limited liability company (“FiscalIQ,” “we”), provides AI-native financial intelligence software. This policy explains what data we collect, why, and the rights you have over it. It is part of our Terms of Service.

Data We Process

Account data (email, authentication) and the financial data you upload — statements, transactions, chart-of-accounts classifications, and the rules you teach the system. We process this solely to provide the service.

Legal Bases

We process personal data to perform our contract with you and on the basis of your consent and our legitimate interest in operating the service.

Your Rights

You can access and export your data, and request erasure, at any time from Settings → Your data & privacy. Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, PIPEDA, and others) you may have additional rights to rectification, restriction, portability, and objection.

Automated Decision-Making & AI

AI features are optional and off by default; your firm decides whether to turn them on. When they are on, FiscalIQ uses artificial intelligence to assist you — for example, to chart bank and card statements, suggest chart-of-accounts classifications, propose personal-vs-business splits, and flag possible anomalies for your review. These features produce suggestions.

A human — you or a member of your firm — reviews, edits, accepts, or rejects every suggestion before it takes effect. FiscalIQ does not make decisions that produce legal or similarly significant effects about you or any individual solely by automated means and without human involvement. We do not use AI to make eligibility, credit, employment, insurance, or comparable determinations about people.

Where automated processing is used, you have the right to be informed of it, to understand its role in the outcome, to obtain human review, to express your point of view, and — where your jurisdiction provides it (including under the California CCPA/CPRA automated decision-making rules, the Australian Privacy Act, and GDPR Articles 13–15 and 22) — to opt out of, or object to, such processing. To exercise these rights, contact us using the details below.

Our AI processing is performed with our AI sub-processor (Anthropic’s Claude). We do not sell your data, and your financial data is not used to train third-party AI models.

Sub-Processors & Transfers

We use the following sub-processors to deliver the service:

  • Vercel — application hosting.
  • Supabase — database, authentication, and file storage.
  • Anthropic (Claude) — AI processing. Your financial data is not used to train AI models.
  • Resend — transactional email (invites, notifications).
  • Cloudflare — DNS and email routing.

Additional processors are engaged only if you enable the related feature: Stripe (payments — we never handle raw card data), DocuSign (e-signature), and Plaid (bank connections). Where personal data is transferred internationally, we rely on Standard Contractual Clauses or an equivalent approved mechanism.

Security

Data is encrypted in transit and at rest, access is scoped per account, and we apply industry security practices. See our security overview for details.

Contact

For privacy requests: Contact Support in the app (Help Center, after you sign in).