Privacy Policy

CanopyDecks turns an organization's accounting data into board financial reports. This policy explains what data we collect, how we use it, who we share it with, and the choices you have. We wrote it to describe what the software actually does.

What we collect

Account information. Your name and email address, collected when you sign in. Sign-in is handled by our authentication provider, Clerk.

Accounting data you connect. If you connect QuickBooks Online, we read financial reports from your company: profit and loss, balance sheet, cash flow, receivables and payables aging, and general ledger. Access is read only. We never write to, change, or delete anything in your QuickBooks company.

Files you upload. Financial reports and budget workbooks you upload are stored so reports can be rebuilt from them.

Reports and settings. The reports you build, how you arrange them, your account mapping, your logo and color, and the board recipients you enter.

Waitlist. If you join the waitlist on our website, we keep the email address you enter and when you entered it. We use it only to contact you about access to CanopyDecks, and we remove it on request.

Technical information. Standard server logs, including request details and error information needed to operate and troubleshoot the service.

How we use it

We use your data only to provide the service to your organization: to compute financial figures, build your reports, write their commentary, and support you. We do not sell your data, we do not use it for advertising, and we do not use it to train artificial intelligence models.

Written commentary

Reports can include written commentary generated with Anthropic's Claude models. Every figure in a report is calculated by our own software, not by the model. The model receives those calculated totals and writes sentences around them, and every number in its text is checked against our calculations before it is shown.

We do not send individual transactions to the model, and we remove the names of donors, vendors, grant recipients, and other counterparties before anything is sent. Under Anthropic's commercial terms, data sent through its API is not used to train its models.

How we protect it

Each organization's data is isolated from every other organization's at the database level, so one customer's data cannot be returned to another. The credentials that let us read your QuickBooks company are encrypted before they are stored, with a key that is kept separately from the database. Data travels over encrypted connections.

Who we share it with

We share data only with the service providers we use to run CanopyDecks, and only as needed to provide it:

• Vercel, which hosts the application
• Render, which hosts our calculation service
• Neon, which hosts our database
• Clerk, which handles sign-in
• Anthropic, which generates written commentary as described above
• Resend, which delivers our notice when someone joins the waitlist
• Intuit, when you connect QuickBooks Online

These providers operate in the United States. We may also disclose information when required by law.

Cookies

We use cookies to keep you signed in, and a short-lived cookie that protects the QuickBooks connection process against forgery. Your light or dark theme choice is stored in your browser. We do not use advertising or tracking cookies.

Your choices

Disconnect QuickBooks at any time from Settings. We revoke our access with Intuit and delete the stored credentials.

Delete a report from your library. It is removed permanently, along with any uploaded files no other report uses.

Delete your account and data by emailing us at the address below. We will delete your organization's data and confirm when it is done.

Retention

We keep your data for as long as your account is active, or until you delete it. Logs are kept for a limited period by our hosting providers.

Changes

If we change this policy, we will update the effective date above and, for material changes, let account holders know.

Contact

Questions about this policy or your data: canopydecks@gmail.com