Privacy Policy

Account information. When you sign up we collect your name, email address, and — if you use a password — a securely hashed password. If you sign in with Google, we receive basic profile information from Google.

QuickBooks data. When you connect a QuickBooks Online company, we access transactions, the chart of accounts, and related metadata needed to surface uncategorized purchases and write categorizations back. We store your QuickBooks access and refresh tokens encrypted at rest.

Usage data. We collect basic operational data such as log and error information needed to run and secure the Service.

We use the information we collect to:

provide and operate the Service; authenticate you and secure your account; read and update your QuickBooks data as you instruct; send transactional emails such as sign-in links, invitations, and email verification; and maintain, troubleshoot, and improve the Service. We do not sell your personal information, and we do not use your QuickBooks financial data for advertising.

We access QuickBooks data only to deliver the Service. Access and refresh tokens are encrypted using AES-256-GCM before storage. We only modify a transaction's expense account when you or an authorized user explicitly submits a categorization. You can revoke our access at any time by disconnecting the company in Categorly or in your Intuit account settings.

We share information with a small set of vendors that help us run the Service, under agreements that limit their use of it:

Intuit (QuickBooks) — the source and destination of your accounting data; Vercel — hosting and delivery; Neon — our database; Resend — transactional email; and Google — optional sign-in. We may also disclose information if required by law or to protect our rights and users.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete a company or your account, we delete or de-identify the associated data within a reasonable period, except where we must retain it to comply with legal obligations.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption of QuickBooks tokens at rest, scoped access controls, and tenant isolation between organizations. No method of transmission or storage is perfectly secure, but we work to protect your information and to promptly address issues.

You can update your account information, disconnect QuickBooks companies, and request deletion of your account at any time. Depending on where you live, you may have rights to access, correct, or delete your personal information; contact us to exercise them.

We use strictly necessary cookies to keep you signed in and to secure the Service. We do not use advertising or cross-site tracking cookies.

Categorly is not directed to children under 18 and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you and will update the “Last updated” date above.

Questions about privacy? Contact us at privacy@categorly.dev.