Privacy Policy

Information we collect

We collect the information needed to provide bookkeeping and tax services and to run our business.

• Account information: your name, email, password hash, and business details such as legal name, entity type, and state.
• Financial data: transactions, balances, and account metadata from accounts you connect through Plaid, plus documents you upload such as receipts and statements.
• Tax information: identifiers and figures needed to prepare your return, including tax identification numbers, which are encrypted at the application layer.
• Usage data: log data, device and browser information, and product analytics used to operate and improve the service.
• Payment data: handled by our payment processor. We do not store full card numbers.

How we use information

• To categorize transactions, reconcile your ledger, and generate financial statements.
• To prepare and, where you request it, file your tax returns.
• To provide support, send service messages, and operate your account.
• To secure the service, prevent fraud, and meet legal and tax obligations.
• To improve our product, including the accuracy of our categorization models.

How we share information

We do not sell your personal information. We share data only as needed to run the service.

• Service providers: Plaid for bank connections, our cloud hosting and database provider, our payment processor, and analytics tools, each under contract.
• Professionals: licensed CPAs who review or file your return when you add those services.
• Legal: when required by law, regulation, or valid legal process, or to protect rights and safety.
• Business transfers: if our business is acquired or merged, subject to this policy.

How we protect information

We use TLS 1.3 in transit and AES-256 encryption at rest. Bank tokens and tax identification numbers are encrypted again at the application layer. Access to each account's data is isolated at the database level using row-level security. Internal access is limited, logged, and granted on a least privilege basis.

Data retention

We keep your data for as long as your account is active. When you ask us to delete your data, we do so within 30 days, with one important exception: we are required by the IRS to retain certain tax records for 7 years, so those records are kept for that period and then deleted.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights in the app or by emailing privacy@tryizzy.com. We honor requests under GDPR and CCPA and will not discriminate against you for exercising your rights.

Children

Tryizzy is for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy. If we make material changes, we will notify you in the app or by email and update the date above.

Contact

BDK Studios LLC, operating Tryizzy. Email privacy@tryizzy.com for any privacy question or request.