Last updated June 9, 2026
Personnel Finance AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By creating an account or using the Service, you agree to the practices described here. If you do not agree, please discontinue use of the Service.
We collect the following categories of information:
The table below summarizes how we classify, retain, control access to, and the GDPR lawful basis for each category of data we process.
| Classification | Examples | Retention Period | Who Can Access | GDPR Lawful Basis |
|---|---|---|---|---|
| PII | Name, email, business name, billing address, phone | Duration of account; 30-day grace period after a verified self-service deletion request, then permanent erasure (financial identifiers retained/anonymized per Financial row below) | User, Personnel Finance AI staff (need-to-know), Auth0, Stripe | Contract performance (Art. 6(1)(b)) |
| Financial | Bank balances, transactions, trade history, portfolio holdings, invoices | 7 years post account closure (IRS requirement) | User, Personnel Finance AI staff (need-to-know), Plaid (retrieval), Alpaca/TastyTrade (brokerage data), Finnhub (ticker symbols only, for news headlines) | Contract performance (Art. 6(1)(b)); Legal obligation — IRS (Art. 6(1)(c)) |
| Credential | Brokerage API keys (Alpaca, TastyTrade), OAuth tokens | Deleted immediately upon disconnection or account closure | User, Personnel Finance AI application layer only (AES-256-GCM encrypted; no staff access to plaintext) | Contract performance (Art. 6(1)(b)) |
| AI Interaction | AI chat messages, financial context submitted to Claude API | 12 months (user may delete earlier via settings) | User, Personnel Finance AI staff (need-to-know), Anthropic Claude API (processing only; not used for training) | Contract performance (Art. 6(1)(b)) |
| Behavioral / Usage | Feature clicks, session duration, pages visited, in-app actions | Identifiable: 12 months; aggregated/anonymized: 24 months | Personnel Finance AI staff (analytics); not shared with third parties | Legitimate interests — service improvement (Art. 6(1)(f)) |
| Device / Technical | IP address, browser type, OS, authentication event logs | 12 months (security logs); session cookies expire on logout | Personnel Finance AI staff (security); Auth0 (authentication events) | Legitimate interests — security (Art. 6(1)(f)) |
| Marketing | Email opt-in, campaign click-through | Until consent withdrawn | Personnel Finance AI marketing staff only | Consent (Art. 6(1)(a)) |
We do not sell your personal information. We share data only with the following categories of third parties, and only to the extent necessary to provide the Service:
We implement multiple layers of security controls to protect your data:
No method of electronic transmission or storage is 100% secure. While we apply industry-leading controls, we cannot guarantee absolute security.
We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods by category:
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise the rights above — other than self-service deletion, which is handled directly in Data & Privacy settings as described — contact our Data Privacy Officer at privacy@personnelfinanceai.com. We will acknowledge and respond to such requests within 30 days (or within the timeframe required by applicable law). This acknowledgement window is separate from the 30-day grace period that follows a self-service deletion request: the grace period governs when erasure is executed, not when we respond to other rights requests. We may need to verify your identity before processing certain requests.
This section applies to California residents and supplements the rights described in Section 7. Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:
| CCPA Category | Examples | Collected? | Source | Business Purpose | Shared With |
|---|---|---|---|---|---|
| Identifiers | Name, email address, IP address, Auth0 user ID | Yes | Directly from you; automatically | Account creation, authentication, security | Auth0, AWS |
| Commercial information | Subscription plan, billing history, payment method type | Yes | Directly from you | Billing and subscription management | Stripe |
| Financial information (Sensitive PI) | Bank account details, balances, transactions, brokerage holdings, trade history | Yes | Via Plaid (bank), Alpaca/TastyTrade (brokerage) | Core service — financial aggregation, reporting, AI insights | Plaid, Alpaca, TastyTrade (your accounts only) |
| Internet / network activity | Pages visited, features used, session duration, browser type | Yes | Automatically | Security, service improvement | AWS (infrastructure) |
| Professional / employment | Business name, entity type, job title | Yes | Directly from you | Tax reporting, AI categorization context | None |
| Inferences | AI-generated transaction categories, financial summaries | Yes | Derived from your financial data | AI-powered reporting and chat | Anthropic Claude API (processing only) |
Do Not Sell or Share. We do not sell or share your personal information as defined under CCPA. No opt-out action is required. For more details, see our Do Not Sell or Share My Personal Information page.
Sensitive Personal Information. Your financial data (bank account details, transactions, brokerage holdings) constitutes sensitive personal information under CPRA §1798.121. We use it solely to provide the Service and do not use it to infer characteristics for advertising purposes.
To exercise your California rights, email privacy@personnelfinanceai.com or use the Data & Privacy section of your account settings. For requests submitted by email, we respond within 45 days (extendable by 45 days with notice). The right to delete can also be exercised directly and immediately in Data & Privacy settings: self-service deletion requests there are confirmed by typing your account email and trigger a 30-day grace period before your personal data is automatically and permanently erased (see Sections 6 and 7 above). Sensitive financial records are retained in anonymized form for 7 years as required by law rather than deleted.
For privacy-related questions, data subject requests, or concerns, please contact our Data Privacy Officer: