Privacy policy
Short version: we collect the transaction lines needed to match your books, and we delete them when you ask. Last updated: October 15, 2026.
What we collect
- Account data — your email address and, optionally, your name and company. Used to run your account and send the notifications you asked for.
- Connection credentials — Plaid-linked read-only bank access and OAuth tokens for your accounting software, stored encrypted at rest.
- Transaction lines — the bank, card, and ledger transactions needed to perform matching, plus the match results, exception drafts, and merchant rules you create. We store the amounts, dates, counterparties, and descriptions your feeds provide; we do not receive online banking logins or passwords.
- Minimal telemetry — page-level product analytics (which features get used) and error reports. No advertising trackers, no third-party ad pixels.
What we don't do
- We never sell your data, and we don't send it to data brokers.
- We don't train shared models on your transactions without your account's opt-in; corrections you make improve your own entity's matching first.
- We don't charge without a card you added.
Who else sees it
Our infrastructure providers (hosting, database, email delivery) process data on our instructions under data-processing agreements, and Plaid relays transaction data as described in its own privacy notice. We remain responsible for that subprocessor chain and list current subprocessors on request.
Your controls
Export your data as CSV at any time from Settings → Data. Email [email protected] to request deletion of your account and all associated data; we confirm within 30 days. You can revoke connections yourself at any time in your bank's or accountant's console.
Changes & contact
Material changes to this policy are announced in-product and by email at least 14 days before taking effect. Questions: [email protected] or Nightclose, Inc. via [email protected].