Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, role, and organization details used to create and operate your workspace.
• Business data you provide — information you enter into the Service, such as clients, coaching programs, goals, scorecards, and notes.
• Data from connected integrations — when you authorize a connection, we access data from that service to provide reporting and analytics. This includes financial data from Intuit QuickBooks Online (profit & loss, balance sheet, accounts receivable), customer and pipeline data from GoHighLevel, and payment data from Stripe.
• Usage information — basic logs and diagnostics generated as you use the Service, used to operate, secure, and improve it.

We use the information we collect to:

• provide, maintain, and secure the Service and your workspace;
• display dashboards, reports, financial summaries, and analytics to you and the authorized users in your organization;
• respond to support requests and communicate with you about the Service; and
• comply with legal obligations.

We do not sell your information, and we do not use data accessed from your connected accounts for advertising.

If you connect QuickBooks Online, you authorize BeneficIQ to access your QuickBooks data through Intuit's OAuth 2.0 authorization, limited to the Accounting scope. We access this data only with your consent and use it solely to provide financial reporting within your BeneficIQ workspace (for example, cash position, accounts receivable, liabilities, and profit & loss).

We store a derived subset of this data (such as balance-sheet snapshots and monthly profit-and-loss entries) together with the OAuth access and refresh tokens needed to keep the connection working. We do not share your QuickBooks data with third parties for their own purposes, and we do not use it for any purpose other than operating the Service for you.

You may disconnect QuickBooks at any time from Settings → Integrations. Disconnecting stops further access and removes the stored access credentials for that connection. You may also request deletion of previously synced QuickBooks data as described in “Data Retention and Deletion” below.

BeneficIQ includes AI-powered features — an assistant, automated analysis, and “AI Employees” (agents) — that read your business data to generate summaries, insights, reports, and suggested actions. We want to be clear about how this works:

• What the AI processes. When you use an AI feature, relevant data from your workspace (for example, client, pipeline, financial, and scorecard data) is sent to our AI subprocessor, Anthropic (the Claude models), to produce a response. AI processing happens only when a feature is used or an agent is scheduled to run.
• Purposes. AI is used to summarize and analyze your own business data, draft reports and communications, and propose next actions. It is not used for advertising, and your data is not sold.
• No training on your data. Your business data is processed to generate outputs for you; it is not used to train the underlying AI models. Anthropic processes API inputs and outputs as a data processor under its commercial terms and does not train its models on them.
• Human oversight (human-in-the-loop). AI features are decision-support, not autonomous authority. Actions an agent proposes that change your data or are sent externally are surfaced for a person to approve, edit, or reject before they take effect. You remain in control of decisions.
• Accuracy. AI outputs can contain errors and should be reviewed before you rely on them for financial, legal, or personnel decisions.
• Your controls. AI features are optional. Administrators can review AI settings in Settings → AI, and you can choose not to use AI features. For questions about AI processing, or to exercise your data-protection rights, contact us using the details below.

For users in the UK/EU: this section, together with “How We Share Information” and “Your Rights and Choices,” describes the automated processing we carry out and the safeguards (meaningful human review) that apply. We do not make solely-automated decisions that produce legal or similarly significant effects about individuals without human involvement.

Your data is stored in a managed PostgreSQL database (Supabase) and the Service is hosted on Vercel. We apply industry-standard safeguards, including:

• encryption of third-party OAuth tokens at rest using AES-256;
• encryption of data in transit using HTTPS/TLS;
• role-based access controls and row-level security so users only see data for their organization and permission level; and
• restricting connection and financial-data access to administrators and authorized roles.

No method of transmission or storage is completely secure, but we work to protect your information using these and other measures.

We do not sell your information. We share it only with service providers (subprocessors) that help us operate the Service, and only as needed to provide it. These include Supabase (database and hosting), Vercel (application hosting), Anthropic (AI features you invoke), Stripe (payments), Intuit (QuickBooks connectivity), and GoHighLevel (CRM connectivity). We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect an integration, we remove the stored access credentials for that connection. You may request deletion of your account and associated data, including data synced from QuickBooks, by contacting us at the address below. We will delete or de-identify such data within a reasonable period, except where retention is required by law.

You may access and update your account information within the Service, disconnect any integration at any time, and request a copy or deletion of your data. To exercise these rights, contact us using the details below.

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

If you have questions about this Privacy Policy or our data practices, contact us at office@beneficmarketing.com.