AI.FO LEGAL

Privacy Policy

Last updated: October 5, 2026

This Privacy Policy explains what information AIFO, Inc. ("AI.FO", "we", "us", or "our") collects when you use our service, how we use and share it, how we protect it, and the choices and rights you have. It applies to the AI.FO website and application.

1. Information we collect

Account information

When you create an account we collect your name, email address, an encrypted (hashed) password, and the company or workspace details you provide.

Financial data from QuickBooks Online

If you connect QuickBooks Online, we access your accounting data on a read-only basis, meaning we read your accounting records but do not write to or modify your QuickBooks data. This can include your chart of accounts, transactions, balances, and standard financial reports. We use this data to compute financial signals and generate analysis for your business.

Files you upload

If you upload financial exports (for example, CSV files), we process the contents to run the same analysis. Uploads are a user-initiated action, not a background pull.

Free health assessment

To run the free assessment you provide an email address. We use it to deliver your assessment result and to identify your assessment session while it exists. We do not create an account. Your uploaded reports and the result are purged within 24 hours of the session ending, as described in Data retention and deletion below.

To limit the free assessment to one per email address, we keep a keyed one-way hash of your email address, with common aliasing removed, after you complete an assessment. The hash cannot be reversed into your address, is never used for marketing and, once your session is purged, is not linked to any other record; it is kept only for as long as the one-per-address limit is in force. If you ask us to delete your data, we delete this hash as well.

Mailing list (optional)

During the assessment you can choose to receive product updates and launch news from AIFO, Inc. by email. This is a separate choice with its own Yes or Skip step. If you choose Yes, we keep your email address for that purpose until you unsubscribe or ask us to delete it; every message carries an unsubscribe link that removes your address. If you choose Skip, your address is kept only as long as your assessment session and is purged with it.

Your choices are recorded with the date and the version of this policy in force when you made them. You can ask us to delete your address at any time by writing to privacy@getaifo.com. Assessment emails are sent through Resend (transactional email).

Billing information

When you subscribe to a paid plan, our payment processor collects and processes your payment details. We receive billing metadata such as your plan, subscription status, and renewal dates, but we do not store full payment card numbers.

Usage and technical data

We collect log and technical data such as your IP address, browser and device information, and actions taken in the application, which we use to operate, secure, and improve the service.

Our marketing site (getaifo.com)

Our marketing site at getaifo.com uses Apollo.io to help us understand which companies visit. When you load a page, Apollo's script records your IP address, the pages you view, your browser details and a random visitor ID stored in your browser. Apollo may match that to a company and, for US visitors, sometimes to a business contact in its database. We use this only for B2B sales outreach. It never runs inside the AI.FO app. To opt out, use the "Do not sell or share my information" link at the bottom of any page on getaifo.com, turn on Global Privacy Control in your browser, or email privacy@getaifo.com and we will delete what we have and stop outreach.

Website visitor tracking and your choices. On getaifo.com we use Apollo.io to identify which companies visit our marketing site, so we can follow up with businesses that may be interested in AI.FO. You can turn this off at any time with the "Do not sell or share my information" link in the footer of every page; we then store a small first-party cookie (aifo_optout) for one year so Apollo does not load in that browser. We also honor Global Privacy Control: if your browser sends a GPC signal, Apollo never loads and we treat it as a request to opt out of the sale or sharing of your personal information. If you visit from the European Union, the European Economic Area or the United Kingdom, Apollo loads only after you choose "Accept" in our banner, and choosing "Decline" sets the same opt-out cookie. Clearing your cookies resets these choices, except GPC, which your browser sends on every visit.

2. How we use information

• To provide the service, including computing financial signals and generating written analysis.
• To create and administer your account and workspace.
• To process subscriptions, billing, and related communications.
• To operate, secure, monitor, and improve the service.
• To provide support and respond to your requests.
• To comply with legal obligations and enforce our terms.

Financial signals are computed by rules-based code. Where written narratives are produced, figures are computed first and an LLM provider is used only to phrase the result; a separate, independent verification step must agree before a narrative is published.

3. QuickBooks Online (Intuit) data

Connecting QuickBooks Online uses a QuickBooks authorization you grant through Intuit, which we use to read your accounting data only; we do not write to your QuickBooks account. You can revoke that access at any time, from within AI.FO or from your Intuit account. When access is revoked or your account is deleted, we stop pulling data from that connection.

The QuickBooks OAuth access and refresh tokens we hold to maintain your connection are encrypted at rest using AES-256-GCM. Your use of the QuickBooks connection is also subject to Intuit's own terms and privacy practices.

4. How we share information and sub-processors

We do not sell your personal information. We share information with the service providers ("sub-processors") below only as needed to operate the service, and with legal or corporate recipients where required (for example, to comply with law or in connection with a corporate transaction).

5. How we protect information

• Data is transmitted over encrypted connections (TLS).
• QuickBooks OAuth access and refresh tokens are encrypted at rest using AES-256-GCM.
• Access to your data is scoped to your workspace and derived from your authenticated session on the server, not selected by client input.
• Access denials are recorded to an append-only log, so a refused request leaves a durable record.

No method of transmission or storage is completely secure, and we do not make security guarantees beyond the measures described here. We do not claim third-party security certifications or blanket encryption of all stored data.

6. Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the service, and afterward as required to meet legal, accounting, or reporting obligations. You may request deletion of your account and associated data by contacting us. When you request deletion, we revoke connected third-party access, remove your data from active systems, and may retain limited de-identified records required for compliance.

Account deletion follows a recovery-then-purge timeline. When you delete your account, we begin closing it: your access ends when the closure takes effect (immediately if you have no remaining paid period, otherwise at the end of your current paid period), and your active sessions are ended at that point. Your account is then kept in a recoverable state for 30 days so you can restore it if the deletion was a mistake. After this 30-day recovery window, your account and its associated data are permanently deleted from our active systems, and any files you stored are deleted from our object storage. Residual copies may remain in our routine, access-controlled backups until those backups are rotated out of retention in the ordinary course.

Free health assessment: your uploaded reports and result are purged within 24 hours of the session ending. The email you provide for the assessment is kept only for that session and purged with it, except the keyed one-way hash described above, which is kept only for as long as the one-per-address limit is in force and is deleted if you ask us to delete your data. If you opt in to the mailing list, we keep your address until you unsubscribe or ask us to delete it; there is no fixed retention period for a mailing-list address. See Information we collect above.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom, and residents of California and other US states with applicable privacy laws, may have specific rights under those laws. We do not sell your personal information and do not use it for cross-context behavioral advertising.

To exercise any of these rights, contact us using the details below. We will respond as required by applicable law. You may also disconnect QuickBooks Online at any time to stop further data access.

8. International data transfers

AI.FO is operated from, and processes data in, the United States. If you access the service from outside the United States, you understand that your information may be transferred to and processed in the United States and other countries where our sub-processors operate.

9. Children's privacy

AI.FO is a business tool and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the service after an update means you accept the revised policy.