Financial OS — Privacy Policy

Last Updated: April 2, 2026

This Privacy Policy describes how Brad Phillipi ("we," "us," or "our") collects, uses, and protects your information when you use the Financial OS platform ("Platform"). We are committed to protecting the privacy and confidentiality of your personal and financial data.

1. Information We Collect

Information You Provide

Account information: Name, email address, company name, and role or title provided during onboarding.
Company information: Business name, industry, and organizational details entered into the Platform.
Communications: Messages sent through the "Ask the CFO" chat feature and any correspondence with us.

Information from Third-Party Integrations

When you connect your QuickBooks Online account or other accounting platforms, we access and retrieve financial data including but not limited to:

Profit and loss statements
Balance sheet data
Accounts receivable and accounts payable aging
Bank account and credit card balances
Transaction records
Vendor and customer names
Payroll and headcount summaries

This data is accessed solely through authorized API connections that you explicitly grant permission for. We do not store your QuickBooks login credentials.

Automatically Collected Information

Usage data: Pages visited, features used, and interaction patterns within the Platform.
Device and browser information: IP address, browser type, operating system, and device identifiers.
Cookies: We use essential cookies to maintain session state. We do not use advertising or tracking cookies.

2. How We Use Your Information

We use the information we collect to:

Provide and operate the Platform, including financial dashboards, reports, and AI-powered advisory features
Generate insights and responses through the "Ask the CFO" chat function
Synchronize your financial data from connected accounting systems
Communicate with you about your account and engagement
Improve and develop the Platform's features and performance
Comply with legal obligations

3. How We Share Your Information

We do not sell, rent, or share your personal or financial information with third parties for marketing or advertising purposes. We may share information in the following limited circumstances:

Service providers: We use third-party services (such as cloud hosting, AI model providers, and analytics tools) to operate the Platform. These providers process data on our behalf under contractual obligations to protect your information.
AI processing: Conversations with the "Ask the CFO" feature are processed by Anthropic's Claude AI. Your financial data included in these conversations is sent to Anthropic's API for response generation. Anthropic does not use this data to train its models.
Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

Encrypted data transmission (TLS/HTTPS)
Secure cloud infrastructure with access controls
Limited access to personal and financial data on a need-to-know basis

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your data for the duration of your active engagement with us. Upon termination, your data is retained for 90 days to allow for export, after which it is permanently deleted unless retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information, subject to legal exceptions.
Data portability: Request your data in a structured, commonly used format.
Opt out: Opt out of any non-essential data processing.

To exercise any of these rights, contact us at brad@handldhome.com. We will respond within 30 days.

7. U.S. State Privacy Supplement

This section applies to residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia.

Categories of Personal Information Collected

Personal identifiers (name, email, IP address)
Commercial information (company name, industry, transaction records)
Financial information (account balances, P&L data, receivables, payables)
Internet or electronic network activity (usage data, browser information)
Professional information (role, title)
Inferences drawn from the above categories

Your Additional Rights

Right to know: You may request the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
Right to opt out of sale: We do not sell your personal information. We do not sell the personal information of individuals we know to be under 16 years of age.
Right to limit targeted advertising: We do not use your data for targeted advertising.
Non-discrimination: We will not discriminate against you for exercising any privacy rights.

You may designate an authorized agent to submit requests on your behalf. To appeal a decision regarding your privacy rights request, contact us with "Appeal" in the subject line.

California Residents

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, you have the rights described above. We do not "share" personal information for cross-context behavioral advertising. We retain personal information for as long as necessary for the purposes described in this policy.

8. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform. The "Last Updated" date at the top reflects the most recent revision.

10. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: brad@handldhome.com