Privacy Policy

1. Information We Collect

• Account information you provide, such as name, business name, email, and login credentials.
• Financial account data accessed with your authorization through Plaid, including account balances, transactions, and credit-card activity.
• Sales and payment data from Stripe and Square, such as sales volume, payouts, and transaction history.
• Usage and device information collected automatically, such as IP address, browser type, and interactions with the Service.
• Cookies and similar technologies as described in our Cookie Policy.

2. How We Use Information

• To provide and operate the Service, including generating cash-flow forecasts using automated models and a third-party AI provider (Anthropic, provider of the Claude AI models).
• To secure, maintain, troubleshoot, and improve the Service and our own models.
• To communicate with you about your account and billing, and to send marketing messages you can opt out of.
• To comply with legal obligations and enforce our agreements.
• To create aggregated or de-identified data that does not identify you or any individual.

3. How We Share Information

We do not sell your personal information for money, and we do not use it for cross-context behavioral advertising. See Section 8 for your opt-out rights.

• Service providers that process data on our behalf, such as our cloud host (Microsoft Azure), our AI provider (Anthropic, which processes connected data to generate forecasts), our data-connectivity provider (Plaid), and our payment/sales providers (Stripe, Square), under contracts limiting their use of the data.
• Aggregated or de-identified data, which we may share for any lawful purpose.
• Legal and safety disclosures when required by law or to protect rights and security.
• Business transfers, such as a merger, acquisition, or sale of assets, subject to this Policy.

4. Connected Data Providers and AI Processing

When you connect a financial account, you do so through Plaid, which acts as our service provider under its own privacy policy. We encourage you to review the Plaid end-user privacy policy at [https://plaid.com/legal/#end-user-privacy-policy]. Sales and payment data is provided through Stripe and Square under their own terms. We will not make statements about your data that are inconsistent with these providers' policies, and we access only the data necessary for the forecasting use case you authorize.

To produce forecasts, your connected data is processed by our third-party AI provider, Anthropic (provider of the Claude AI models), acting as our service provider. We may also create and use aggregated or de-identified data, which does not identify you, to improve our own models; we do not re-identify such data.

5. Data Retention

We retain personal information for as long as your account is active. Connected financial and sales data is retained for up to 24 months to generate and improve your forecasts, after which we delete or de-identify it, unless longer retention is required to meet legal, accounting, or security obligations. When you disconnect an account, we stop accessing new data from it, and you may request deletion as described below.

6. Security

Consistent with the GLBA Safeguards Rule, we maintain an information-security program with administrative, technical, and physical safeguards designed to protect financial information, including encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

7. Marketing Communications

We send service and transaction messages necessary to operate the Service, and we may also send marketing emails about features and offers. Every marketing email includes an unsubscribe link and our postal address, consistent with the CAN-SPAM Act, and you can opt out at any time without affecting service messages. Manage your preferences in your account settings or by emailing privacy@shekl.ai.

8. Your Privacy Rights (Multi-State)

Depending on your state of residence, you may have some or all of the following rights: to know and access the personal information we hold; to correct it; to delete it; to obtain a portable copy; to opt out of any “sale” or “sharing” and of targeted advertising; and to limit the use of sensitive personal information. Available rights and how they apply vary by state (for example, under the laws of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana).

To exercise rights, contact us at privacy@shekl.ai or [request link]. We will verify your request as required by law.

• You may use an authorized agent, with proof of authorization.
• We will respond within the timeframes required by applicable law (generally 45 days, extendable).
• If we deny a request, you may appeal where your state's law provides an appeal right.

Categories of Personal Information (Notice at Collection)

9. Children's Privacy

The Service is for business use and is not directed to children. We do not knowingly collect personal information from anyone under 18 (or under 13 in any event).

10. Changes and Contact

We may update this Policy and will post the new effective date. Contact: Shekl, Inc., 35 Hudson Street, Apt 2407, Jersey City, NJ 07302, privacy@shekl.ai.