Privacy Policy

1. Information we collect

• Account information — the name and email address of each authorized user.
• Financial and operational data from systems you connect, such as Intuit QuickBooks Online (accounting figures and reports) and Aspire (opportunities, invoices, labor hours). Accounting systems are accessed read-only.
• Meeting content, where enabled — recordings, transcripts, and summaries from meeting tools (e.g., Zoom, Fathom) — used to produce meeting notes and follow-up tasks.
• Work product you create in the Service, such as projects, tasks, and time entries.
• Usage and audit records — a log of actions taken in the Service for security and accountability.

2. How we use information

We use the information above solely to:

• produce and deliver your advisory deliverables (scorecards, month-end close, meeting notes and tasks);
• operate, secure, maintain, and support the Service;
• keep an audit trail of actions taken in the Service.

We do not sell your information, and we do not use it for advertising. We do not use your financial data to train machine-learning models.

3. Intuit QuickBooks data

When you connect QuickBooks Online, you authorize the connection through Intuit's own consent screen; we never receive your Intuit password. The Service accesses your QuickBooks data on a read-only basis and uses it only to generate the financial deliverables you have engaged Denali to produce. We do not write to your QuickBooks company, we do not sell or rent QuickBooks data, and we do not use it for any purpose other than providing the Service to you. QuickBooks data is stored securely (see Security below) and shared only with the service providers listed below who process it on our behalf. You may disconnect QuickBooks at any time, which revokes our further access; contact us to have previously retrieved data deleted.

4. How we share information

We share information only with service providers (subprocessors) that help us run the Service, each bound to process it on our behalf and protect it:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Anthropic — AI processing of content you submit; not used to train its models.
• Intuit and Aspire — the systems you connect as data sources.
• Zoom / Fathom — meeting capture, where enabled.

We may also disclose information if required by law or to protect rights, safety, or the integrity of the Service.

5. Security

Data is encrypted in transit and at rest. Each client's data is isolated and enforced at the database layer (row-level security), so a client user can access only their own organization's records. Credentials and access tokens are held server-side in a secret store, never exposed to the browser, and access to the Service uses least-privilege roles. Every AI or connector action is written to an audit log.

6. Data retention and deletion

We retain information for as long as needed to provide the Service and your engagement, and as required by law. On request or on termination of your engagement, we will delete or return your Client Data, subject to legal retention obligations and routine backups. Disconnecting a connected system stops further access to it.

7. Your choices

You may request access to, correction of, or deletion of your information, and you may disconnect any connected system at any time. Contact us using the details below.

8. Children

The Service is intended for business use and is not directed to individuals under 18.

9. Changes

We may update this Policy from time to time. Material changes will be reflected by a new effective date on this page.

10. Contact

Denali Consulting Services — dev@godenali.com.