Privacy policy
The short version
- Intendant keeps books for its owner and people the owner invites. It isn't open to the public.
- We never see or store your bank password. Banks connect through Plaid, on Plaid's own screens.
- We don't sell your data or use it for advertising.
- You can ask us to see, correct or delete your data at any time.
What we collect
- Account details: your name, email address and sign-in security settings, held by our sign-in provider, Clerk.
- Bookkeeping data: accounts, transactions, journal entries, notes, rules, and files you upload, such as bank statements and receipts.
- Bank data through Plaid, if you connect a bank: posted transactions (date, amount, description) and the last four digits of the accounts you choose to attach.
- Activity records: a log of changes in your books and who, or which agent, made them.
Plaid's role
We use Plaid Inc. to connect bank accounts. When you choose to connect, Plaid shows its own screens, where you sign in to your bank and agree to share data. Plaid handles that data under the Plaid End User Privacy Policy.
How we use your data
Only to provide the bookkeeping service: importing and categorizing transactions, reconciling accounts, producing reports, and keeping an audit trail. If you connect an AI agent to your books, it reads only what its access token allows, and its AI provider processes that data under its own terms. The AI providers we support are Anthropic (Claude) and xAI (Grok).
On plans that include built-in AI, Intendant itself sends transaction descriptions, amounts and account names to Anthropic to suggest categories and write monthly summaries, unless you turn it off in settings. We remove account numbers, names we can recognize and other identifiers first. Anthropic processes this under its commercial terms, which do not allow it to train models on that data, and keeps it only for a limited period.
Who we share it with
Only the services that run Intendant: Clerk (sign-in), Neon (database), Vercel (hosting and file storage), Plaid (bank connections), Anthropic (built-in AI, on plans that include it), and the AI providers of agents you connect. We also disclose data if the law requires it.
How we protect it
Data travels over encrypted connections and is encrypted where it's stored. Bank access tokens get an extra layer of encryption. Every sign-in requires a second step, such as an authenticator app. Each set of books is kept separate from every other.
How long we keep it
Bookkeeping records are kept while your books are active, then for as long as the law requires. Bank connection tokens are deleted when a bank is disconnected.
Your choices
Email us to see, correct or delete your data. We'll confirm it's you and respond within 30 days. Some records may be kept where the law requires.
On request, we disconnect a bank and delete our access to it.
Children
Intendant isn't for anyone under 18.
Changes
We'll post any change here and update the effective date.
Contact
Privacy questions: support@silvapeaklabs.com