Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

Account Information

• Name and email address (via Google OAuth or email signup)
• Authentication credentials managed by Supabase Auth

Business Profile Data

• Business name, industry, entity type, and location
• Revenue, expenses, and other financial figures

Personal Financial Data

• Personal assets, liabilities, net worth, and income, collected through the Business Plan Generator

Business Plan Data

• All inputs you provide during plan creation
• AI-generated plan content and financial projections

Calculator Data

• Inputs, results, and saved scenarios from all calculators

Email Capture Data

• Email addresses submitted through lead capture forms, newsletter signups, or gated content downloads

Third-Party Accounting Integrations

• When you connect a third-party accounting service (such as QuickBooks Online), we access financial data from that service on your behalf, including chart of accounts, profit and loss reports, balance sheets, invoices, and transaction history.
• We store this data in our database to power KnowYourNut calculators, financial health scores, and AI-powered analysis.
• We do not modify, delete, or write data back to your connected accounting service.

Usage & Device Data

• Pages visited and features used
• Browser type, operating system, and device information
• IP address and general location data

2. How We Use Your Information

• Generate AI-powered business plans and financial analysis using your inputs
• Provide calculator results, financial health scores, and insights based on your data
• Power your business profile so data connects across all tools
• Send account-related and, if you opt in, marketing email communications (drip campaigns, tips, and updates)
• Improve our services based on usage patterns and aggregated data

3. AI and Large Language Model Data Processing

Certain features of the Service use third-party large language models (LLMs) to generate content on your behalf. Before any of your data is sent to an LLM provider, you will be shown a consent modal explaining what data will be transmitted and given the option to proceed or decline.

When you use AI-powered features (such as the Business Plan Generator, AI financial analysis, or AI insights), the following data may be sent to our LLM providers:

• Business profile information including business name, industry, revenue, and expenses
• Financial figures and calculator inputs relevant to your request
• Personal financial data you have entered (assets, liabilities, income) if needed for business plan generation
• Any free-text prompts or descriptions you provide to the AI features
• Financial data imported from connected third-party accounting services (such as QuickBooks Online), including revenue, expenses, and account balances

Our current LLM providers are:

• Anthropic (Claude) for business plan generation and financial analysis. Anthropic does not use data submitted through its API to train its models.
• OpenAI for supplemental AI features. OpenAI does not use data submitted through its API to train its models when accessed via the API.

We do not send your data to any LLM provider without your affirmative consent. You can decline AI processing at any time, and the non-AI features of the Service will continue to function normally. We do not permit our LLM providers to retain your data beyond what is necessary to process your request.

4. Third-Party Service Providers

We share your data only with the service providers necessary to operate the Service. We do not sell your data to advertisers or data brokers.

• Supabase for database hosting, authentication, and real-time services.
• Vercel for application hosting and deployment.
• Resend for email delivery of transactional and marketing emails (if email features are enabled).
• Lemon Squeezy for payment processing of Pro subscriptions and lifetime purchases. We do not store your credit card information.
• Plaidfor secure bank account connectivity. When you connect your bank, Plaid facilitates the connection between your financial institution and KnowYourNut. Plaid handles your bank login credentials directly and never shares them with us. We receive only transaction data and account balances needed to power your dashboard. You can disconnect at any time from Settings. Plaid's privacy policy governs data on their platform.
• Intuit (QuickBooks Online)– when you choose to connect your QuickBooks account, we use Intuit's API to import your financial data. Intuit's privacy policy governs data on their platform. We access your data in read-only mode and only with your explicit authorization, which you can revoke at any time from your QuickBooks account settings or from KnowYourNut Settings.

5. Cookies and Tracking

We use cookies to operate the Service. Here is what we use and why:

• Session cookies: Required for authentication and keeping you logged in. These expire when you close your browser or after your session times out.
• Preference cookies: Used to remember your settings, such as cookie consent choices. These persist until you clear them or they expire.
• Analytics cookies: We may use basic analytics to understand how the Service is used. We do not use third-party advertising or retargeting cookies.

If you are located in the European Union or European Economic Area, you will see a cookie consent banner on your first visit. You may accept or reject non-essential cookies at that time, and you can change your preferences at any time through your browser settings. Essential cookies (those required for the Service to function) cannot be disabled while using the Service.

6. Data Storage & Security

• Your data is stored in Supabase, a cloud-hosted PostgreSQL database with row-level security (RLS) policies that ensure users can only access their own data.
• All data in transit is encrypted via HTTPS.
• Access controls are enforced on all API endpoints.
• Financial data is encrypted at rest and in transit using industry-standard encryption provided by the hosting infrastructure.
• Authentication is handled through Supabase Auth with secure password hashing and session management.

7. Data Retention

We retain different types of data for different periods:

• Business profiles: Retained for as long as your account is active. When you delete your account, your business profile data is permanently deleted within 30 days.
• Calculator results and saved scenarios: Retained while your account is active. Calculator data associated with inactive accounts (no login for 90 consecutive days) is automatically purged. You will receive an email notice before any automatic purge occurs, giving you the opportunity to log in and preserve your data.
• AI-generated content: Business plans and AI analysis results are retained while your account is active and deleted when your account is deleted. We do not retain copies of AI-generated content after account deletion.
• Email capture data: Email addresses collected through lead forms or newsletter signups are retained until you unsubscribe. When you unsubscribe, your email is removed from all marketing lists within 10 business days. You can unsubscribe at any time using the link in any email we send.
• Connected accounting data: Financial data imported from QuickBooks or other connected services is refreshed periodically while the connection is active. If you disconnect your accounting service, imported data is deleted within 30 days. If you delete your KnowYourNut account, all imported accounting data is permanently deleted within 30 days.
• Deleted accounts: All remaining account data, including business plans, personal financial information, and profile data, is permanently deleted within 30 days of account deletion.

8. Your Rights

You have the following rights regarding your data:

• Access and view: You can view all your data within your account at any time.
• Export your data:You can download a complete copy of your data at any time using the "Download My Data" button in Settings. This export includes your business profile, calculator results, saved scenarios, and any AI-generated content.
• Request a data copy: If you are unable to use the self-service export, you may email us at support@knowyournut.com to request a copy of all personal data we hold about you. We will respond within 30 days.
• Delete your account: You can delete your account and all associated data through Settings at any time. You may also email us to request deletion. All data is permanently removed within 30 days of the request.
• Correction: Update your data anytime through the app.
• Disconnect integrations: You can disconnect any linked accounting service at any time from Settings. Disconnecting revokes our access and triggers deletion of imported data within 30 days.
• Withdraw AI consent: You may withdraw your consent for AI data processing at any time. This will not affect the availability of non-AI features.
• California residents: You have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.
• EU residents: You have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, data portability, and to object to processing. Our lawful basis for processing is your consent (for AI features) and legitimate interest (for operating the Service). You may lodge a complaint with your local data protection authority.

9. Children

KnowYourNut is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Email: support@knowyournut.com
• Business: Blue Collar Holdings LLC