Privacy Policy

How EveryCent collects, uses, and protects your personal information.

Effective: July 2, 2026 · Last updated: July 2, 2026

1. Who we are

EveryCent (“we”, “us”, or “EveryCent”) is an AI-native accounting and bookkeeping platform for small businesses. This Privacy Policy applies to everycent.ai and any related services we offer.

If you have privacy questions, please contact us at security@everycent.ai.

2. Information we collect

Information you provide

• Account information — name, email, password, company name, role.
• Business data you upload — chart of accounts, transactions, invoices, receipts, bills, payroll and employee records, tax documents, and any other bookkeeping content you enter or import into EveryCent.
• Bank and payments credentials — when you connect a bank account through Plaid or a payment processor, we receive and store the access tokens and account metadata needed to sync your data.
• Support communications — anything you email or send us.

Information collected automatically

• Usage data — pages you visit, features you use, timestamps, IP address, browser, device type.
• Error logs — captured by Sentry when an unexpected error occurs.
• Cookies — we use a session cookie to keep you signed in and a small number of first-party analytics cookies. We do not sell advertising.

3. How we use your information

• To provide the EveryCent service you signed up for.
• To sync your bank, payroll, and payments data through connected partners.
• To improve product quality, reliability, and security.
• To detect and prevent fraud, abuse, and security incidents.
• To meet legal, tax, and regulatory obligations.
• With your consent, to send you occasional product updates and marketing emails. You can unsubscribe at any time.

4. AI processing

EveryCent uses AI to help you categorize transactions, extract data from receipts, and answer questions about your books. Before any personal or business data is sent to a third-party AI provider, we pseudonymize it: personal identifiers and company identity are masked. AI-suggested actions never execute without your explicit confirmation.

5. Sub-processors

We rely on the following sub-processors to run EveryCent. Each is contractually required to protect your data.

Sub-processor	Purpose	Location
Google Cloud Platform	Hosting (Cloud Run, Cloud SQL, Secret Manager, Cloud Storage)	United States (us-central1)
Plaid	Bank connections	United States
Gusto	Payroll partner	United States
Stripe	Payment processing	United States
Resend	Outbound transactional email	United States
Postmark	Inbound email capture	United States
Anthropic	AI processing (Claude)	United States
Nebius Token Factory	AI processing (open-weight inference)	United States
Sentry	Error monitoring	United States
PostHog	Product analytics	United States

A current sub-processor list is also maintained at our Trust page.

6. Data retention

We retain your data as follows:

• Customer financial records — indefinitely while your account is active; up to 7 years after account closure (IRS §6501 record-keeping expectations).
• Payroll records — 4 years after separation or last tax filing.
• Tax documents — 7 years.
• Audit logs — indefinitely while the account is active; 7 years after closure.
• Backups — 7-day rolling retention.
• Application logs — approximately 90 days.
• Marketing data — until you unsubscribe, plus a 7-day suppression window.
• Session data — up to 30 days.

7. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access — get a copy of your data.
• Correction — update inaccurate information.
• Deletion — request that we delete your data, subject to retention requirements above.
• Restriction — ask us to pause processing.
• Portability — receive your data in a machine-readable format.
• Objection — opt out of marketing at any time.
• Automated decisions — EveryCent does not make solely-automated decisions that produce legal or similarly significant effects.

To exercise any right, email security@everycent.ai. We’ll respond within 30 days.

8. Data location and transfers

EveryCent is hosted in the United States. If you access the service from outside the United States, your information is transferred to and processed in the United States.

EveryCent does not currently onboard customers resident in the European Union. Before doing so, we will complete a cross-border transfer analysis (Standard Contractual Clauses, sub-processor DPAs) as required under GDPR Articles 44–49.

9. Security

We use industry-standard technical and organizational measures to protect your data, including TLS 1.2+ in transit, AES-256 encryption at rest, field-level encryption for sensitive data (bank tokens, employee SSNs, webhook secrets), and multi-factor authentication on every personnel-held account.

Details of our security program are available at everycent.ai/trust.

10. Children

EveryCent is a B2B accounting product and is not directed at children under 13 (or the local equivalent). We do not knowingly collect personal information from children. If you are aware that a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered account holders and by posting the updated policy at this URL. The “Last updated” date reflects the most recent revision.

12. Contact

EveryCent
Email: security@everycent.ai