AI.FO LEGAL
Last updated: August 16, 2026
This Privacy Policy explains what information AIFO, Inc. ("AI.FO", "we", "us", or "our") collects when you use our service, how we use and share it, how we protect it, and the choices and rights you have. It applies to the AI.FO website and application.
Account information
When you create an account we collect your name, email address, an encrypted (hashed) password, and the company or workspace details you provide.
Financial data from QuickBooks Online
If you connect QuickBooks Online, we access your accounting data on a read-only basis, meaning we read your accounting records but do not write to or modify your QuickBooks data. This can include your chart of accounts, transactions, balances, and standard financial reports. We use this data to compute financial signals and generate analysis for your business.
Files you upload
If you upload financial exports (for example, CSV files), we process the contents to run the same analysis. Uploads are a user-initiated action, not a background pull.
Billing information
When you subscribe to a paid plan, our payment processor collects and processes your payment details. We receive billing metadata such as your plan, subscription status, and renewal dates, but we do not store full payment card numbers.
Usage and technical data
We collect log and technical data such as your IP address, browser and device information, and actions taken in the application, which we use to operate, secure, and improve the service.
Financial signals are computed by rules-based code. Where written narratives are produced, figures are computed first and an LLM provider is used only to phrase the result; a separate, independent verification step must agree before a narrative is published.
Connecting QuickBooks Online uses a QuickBooks authorization you grant through Intuit, which we use to read your accounting data only; we do not write to your QuickBooks account. You can revoke that access at any time, from within AI.FO or from your Intuit account. When access is revoked or your account is deleted, we stop pulling data from that connection.
The QuickBooks OAuth access and refresh tokens we hold to maintain your connection are encrypted at rest using AES-256-GCM. Your use of the QuickBooks connection is also subject to Intuit's own terms and privacy practices.
We do not sell your personal information. We share information with the service providers ("sub-processors") below only as needed to operate the service, and with legal or corporate recipients where required (for example, to comply with law or in connection with a corporate transaction).
| Sub-processor | Purpose |
|---|---|
| Intuit, Inc. (QuickBooks Online) | Source of accounting data you choose to connect. We access it on a read-only basis and do not write to your QuickBooks data. |
| Payment processor (Stripe, Inc.) | Subscription billing and payment processing. Full card numbers are handled by the processor, not stored by us. |
| Cloud database hosting (managed PostgreSQL) | Stores your account and processed financial records so the service can operate. |
| Object storage (Cloudflare R2) | Stores files you upload and generated artifacts. |
| Large language model (LLM) providers | Generate written narratives from figures already computed by our engine. Financial signals themselves are computed by rules-based code, not by an LLM. |
No method of transmission or storage is completely secure, and we do not make security guarantees beyond the measures described here. We do not claim third-party security certifications or blanket encryption of all stored data.
We retain your information for as long as your account is active or as needed to provide the service, and afterward as required to meet legal, accounting, or reporting obligations. You may request deletion of your account and associated data by contacting us. When you request deletion, we revoke connected third-party access, remove your data from active systems, and may retain limited de-identified records required for compliance.
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom, and residents of California and other US states with applicable privacy laws, may have specific rights under those laws. We do not sell your personal information and do not use it for cross-context behavioral advertising.
To exercise any of these rights, contact us using the details below. We will respond as required by applicable law. You may also disconnect QuickBooks Online at any time to stop further data access.
AI.FO is operated from, and processes data in, the United States. If you access the service from outside the United States, you understand that your information may be transferred to and processed in the United States and other countries where our sub-processors operate.
AI.FO is a business tool and is not directed to children. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the service after an update means you accept the revised policy.
If you have questions about this Privacy Policy or how we handle your information, contact us at legal@getaifo.com.
AIFO, Inc., 12 28th Street, San Francisco, CA 94110