Privacy Policy

Last updated: February 24, 2026

Data Stewardship

The data retrieved from QuickBooks remains the property of the user. FoundMoney only processes it to perform account audit workflows for potential legal settlement recoveries.

1. What We Collect

Account identity data: email, auth identifiers, and account profile metadata.
Financial audit data: transaction vendor names, dates, amounts, statement line details, and connected account metadata.
Email invoice evidence: receipt/invoice metadata used to validate historical purchases and subscriptions.

2. Data Minimization

We collect only the fields required to run settlement audits: vendor names, transaction dates, amounts, and related evidence fields. We do not collect unnecessary ledger dimensions unrelated to settlement eligibility analysis.

3. How We Use Data

Find potential matches between user transactions and active settlement windows.
Estimate potential recovery ranges and generate filing guidance.
Show users supporting evidence for claim qualification.

Zero-Sale Promise

We do not sell, rent, or trade QuickBooks transaction data to third parties for marketing purposes.

4. Encryption & Security

Sensitive data, including OAuth tokens, is encrypted at rest using AES-256 and encrypted in transit using TLS 1.2+.

5. Retention, Deletion, and Right to be Forgotten

If a user disconnects QuickBooks or deletes their FoundMoney account, cached financial data is scheduled for purge from our Neon database within 30 days. Users can request manual deletion by contacting addisonghoff@gmail.com.

6. Third-Party Sub-processors

Vercel: application hosting and edge delivery.
Neon: managed PostgreSQL database infrastructure.
Fixie: static IP outbound proxy for QuickBooks API traffic.
Intuit QuickBooks API: accounting data authorization and retrieval.
Plaid, Clerk, Resend, OpenAI: data connectivity, auth, messaging, and analysis support services.

7. Contact

Questions about this policy can be sent to addisonghoff@gmail.com.