Privacy Policy

How Piggy Banker collects, uses, shares, and protects information when you use our finance software, our fractional CFO services, or our websites.

Raterman Group LLC, doing business as Piggy Banker (“Piggy Banker,” “we,” “us,” or “our”), has two offerings: the Piggy Banker software, an AI finance workspace at https://finance.piggybanker.io, and fractional CFO services delivered by our team, described at https://piggybanker.io/cfo. This Privacy Policy explains what information we collect through both, how we use and share it, and the choices you have. It also covers our websites, including https://piggybanker.io.

1. Key terms

In this policy:

Software means the Piggy Banker web application at https://finance.piggybanker.io.
CFO services means our fractional CFO services, including bookkeeping, custom financial statements, monthly reporting and check-ins, planning and analysis, CFO-level support, and add-on services.
Services means the software, the CFO services, and our websites.
Customer means a business that has a software account with us or has hired us for CFO services.
Workspace means the area of the software that holds one company’s data.
Client company means a company whose workspace is managed through a CFO Firm account.

This policy does not cover the services you connect to Piggy Banker, such as your accounting system or bank. Those services have their own privacy policies.

2. How this policy applies to software customers and CFO-services clients

Software customers

A customer that uses the software decides what data goes into its workspaces and who can see it. We process that business data to provide the software to the customer, under our Terms of Service and the customer’s settings. This policy also covers the personal information we collect about the people who use the software, such as names, email addresses, and activity in the software.

The software has two account types:

Company accounts are for one company managing its own finances in its own workspace.
CFO Firm accounts are for outside CFO, accounting, and finance firms that manage finances for many client companies. A CFO Firm account is a type of software account. It is separate from our own CFO services.

CFO Firm accounts and their client companies

When a CFO Firm connects or uploads a client company’s data, we process that data on the firm’s behalf and under its instructions. The firm is responsible for having the client company’s authorization to connect its accounts and process its data in the software, and for giving the client company any notices the law requires.

If you work for a client company and have a question about your company’s data in a CFO Firm’s account, please contact that firm first. We will help the firm respond.

CFO-services clients

When you hire us for CFO services, our team works directly with your financial information to do the work described in your proposal, engagement letter, or order form (“engagement terms”). This policy applies to that information, together with any confidentiality terms in your engagement terms. Our team may use the software and the service providers listed in section 9 to deliver CFO services.

Website visitors and prospects

If you visit our websites, fill out a form, complete our diagnostic questionnaire, or book a call, this policy covers the information you give us and the information collected automatically.

If you are both a software customer and a CFO-services client, all of these parts apply to you.

3. Information we collect

Account information

Your name, email address, and password. Passwords are handled by our authentication provider, Supabase, and are not stored in our application database.
Your company or firm name, account type (Company or CFO Firm), time zone, and role.
Email addresses of people you invite to your account, to a workspace, or to view a page.

Billing information

Billing contact, plan details (such as number of seats), and payment status.
Payment card details are collected and stored by our payment processor, Stripe. We do not receive or store your full card number.

Financial data from connected accounts

With your authorization, we collect data from the accounts you connect (see section 4):

Accounting systems (QuickBooks Online, directly or through Merge; Xero; and Puzzle): company details, chart of accounts, account balances, financial statements, general ledger and journal entries, transactions, customers and vendors (including names and contact details), invoices, bills, and payments.
Bank and financial accounts, through Plaid: account names and types, the last four digits of account numbers, balances, transactions, and, if you choose to share them, investment holdings and loan details such as balances, interest rates, and payment dates. We do not receive your bank login credentials, and we do not store full account numbers.

Content you add to the software

Questions, prompts, and chat messages, including requests for models, forecasts, scenarios, and reports, and the AI responses to them.
Company context, such as your business profile, how the business works, owners and pay, strategy notes, and other notes.
Metrics, forecasts, scenarios, pages, recurring task instructions and schedules, and approvals.
Files you upload, such as spreadsheets, CSV files, PDFs, and images.

Slack and meeting notes

Slack. If you connect Slack, we receive the information about your Slack workspace, channels, and users that we need to show you your channels and deliver messages to the destinations you choose. If you select channels as context channels, we read recent messages from those channels and store them in your workspace as context.
Granola. If your account connects Granola, we import the meeting notes, summaries, and transcripts that your Granola API key can access into a review inbox. A user in your account decides which notes to save to a workspace.

Usage, device, and log information

When you use the software or visit our websites, we and our service providers collect:

IP address, browser type, and device information;
pages visited and features used, with dates and times;
diagnostic and error logs; and
AI usage records, such as the model used, the amount and cost of usage, and the user and workspace it belongs to.

Communications and CFO-services records

Information you provide when contacting support, scheduling meetings, participating in onboarding, or communicating with our team.
For CFO services: the financial records, statements, and other documents you share with us, the access you give our team to your systems, and the work we produce for you.
For background check and security services: information about the people or businesses you ask us to review, as described in your engagement terms.

Website forms, diagnostic, and booking

If you complete our Financial Health & Runway Diagnostic or another form, we collect your name, email address, phone number, business or personal name, and your answers, which can include figures such as monthly revenue or income, expenses, cash, debt, payroll, and savings.
If you book a call, our scheduling provider, Cal.com, collects the details you enter and shares them with us.

4. Connected accounts and read-only access

How connections work

You choose which accounts to connect. You sign in through the other service’s own authorization screen (for QuickBooks, Xero, Puzzle, and Slack) or through the Plaid or Merge connection window. You give your login details to that service, not to us. The service then gives us an access token, which we store encrypted. To connect Granola, you paste an API key from your Granola account, which we also store encrypted. For some connections you can also choose what we import, such as which bank accounts or which types of data.

Read-only access

The software only reads data from your accounting system. It never posts entries to, or edits, your accounting system. It cannot move money, make payments, or change settings in your bank or financial accounts.

When you connect QuickBooks, Intuit’s authorization screen describes the standard QuickBooks access that Intuit grants to apps. We use that access only to read your data.

Disconnecting

Users with permission to edit a workspace can disconnect an account at any time in the software. When you disconnect an account:

we ask the provider to revoke our access (we do this for QuickBooks, Xero, Plaid, Merge, and Puzzle);
we delete the access tokens we stored for that connection; and
we stop importing new data from it.

Data we already imported stays in your workspace, so your existing reports and history keep working, until you delete it or the workspace is deleted (see section 12).

Disconnecting Slack stops our use of that connection and deletes the credentials we stored for it. Because one Slack installation can be shared by more than one Piggy Banker workspace, we do not uninstall the Piggy Banker app from your Slack workspace. To remove it completely, uninstall it in Slack. Disconnecting Granola deletes the stored API key. Notes already saved to a workspace stay there.

You can also revoke our access from the other service’s own settings.

Plaid

We use Plaid Inc. (“Plaid”) to connect to bank, investment, and loan accounts. When you connect an account through Plaid, you give your login details to Plaid, and Plaid shares the account information you authorize with us. Plaid’s handling of your information is governed by the Plaid End User Privacy Policy. By connecting an account through Plaid, you acknowledge and agree that Plaid may collect, use, and share your information as described in that policy.

5. How we use information

We use information to:

provide and operate the Services, including importing data from your connected accounts, building metrics, forecasts, scenarios, reports, and pages, running recurring tasks, and delivering content you approve;
operate your account, verify users, and apply the roles and permissions your account sets;
provide AI features (see section 6);
deliver CFO services under your engagement terms;
measure AI usage and bill for subscriptions, additional AI usage, and CFO services;
provide customer support;
communicate with you about your account, security, and changes to the Services;
respond to inquiries, diagnostic submissions, and call requests, and follow up about our services;
improve our products;
maintain platform security and detect fraud and misuse; and
comply with legal obligations.

6. AI processing

What we send to AI providers

When you ask a question, request a model, forecast, or report, or when a recurring task runs, we send your request and the information needed to answer it to a third-party AI model provider. That information can include financial data from your connected accounts, metrics, company context, the contents of files you uploaded, and earlier messages in the conversation. We also send some text to an AI provider to create embeddings (numerical representations of text) that power search in the software.

We send these requests through Vercel AI Gateway to model providers such as OpenAI, Anthropic, and Google. The provider that handles a request depends on the AI model selected for your account or task. The account owner can choose the default model.

Training and retention by AI providers

We do not use your confidential business information to train public AI models unless we expressly disclose it and you authorize it.

We only use AI model providers that do not use the content we send them to train their models. For requests routed through Vercel AI Gateway, we enforce this with gateway settings, and we also request zero data retention where it is available.

Storage in your workspace

We store your conversations, AI responses, and recurring task results in your workspace so you and your team can review them. They are deleted with the workspace (see section 12).

Accuracy and usage

AI output can be wrong or incomplete. Review it, and check it against the linked source data, before you rely on it. We measure AI usage for each account to apply included allowances, usage limits, and billing, as described in our Terms of Service.

Recurring tasks run on the schedule you set and save their results in your workspace.
Approval before anything leaves the software. Before a recurring task posts to Slack or sends an email, a user with permission must approve the exact content. If the content changes after approval, it needs a new approval. We send approved content only to the destinations you set up, such as a Slack channel or email recipients.
Published pages. If you publish a page, anyone with the link can view it. An access code is required by default. If you turn the code off, the link alone gives access. You can unpublish a page, change its link, or set a new code at any time.
Client portal. CFO Firm accounts can publish reports to a portal for a client company. Users the firm invites to the portal can see the published reports.

8. Cookies and analytics

In the software

Necessary cookies keep you signed in, protect your session, and remember that you entered the access code for a published page. The software does not work without them.
Browser storage holds things like your signup details while you confirm your email address.
Product analytics. We use PostHog to understand how the software is used, such as which features people use. We have turned off PostHog’s automatic capture of clicks and page text and its session recording, and we identify users to PostHog with coded identifiers instead of names or email addresses. PostHog stores an identifier in a cookie or in your browser’s local storage.

On our websites

Our websites, including https://piggybanker.io and our diagnostic at https://diagnostic.piggybanker.io, are hosted by Vercel. Vercel processes standard request information, such as your IP address, browser type, and the pages you request, to deliver and protect the sites. Our websites load typefaces from Google Fonts, which receives your IP address when your browser requests them. The pages on piggybanker.io do not set cookies. Some pages link to tools from other companies, such as Cal.com for booking calls. Those companies’ privacy policies apply to information you give them.

Your choices

You can block or delete cookies in your browser settings. If you block necessary cookies, you will not be able to sign in to the software. Our Services do not currently respond to browser “Do Not Track” signals.

9. Service providers

We use service providers to run our business and the Services. These providers process information only as necessary to provide the Services on our behalf. The service providers we currently use include:

Vercel: hosts the software and our websites, and runs Vercel AI Gateway, which routes AI requests.
Supabase: database, sign-in and account emails, and file storage.
AI model providers, such as OpenAI, Anthropic, and Google: generate AI responses and search embeddings (see section 6).
Plaid: connects bank, investment, and loan accounts (see section 4).
Merge: a data integration service we use for “QuickBooks via Merge” connections.
Stripe: subscription billing and payment processing.
Metronome: measures additional AI usage so it can be billed through Stripe.
Resend: sends emails that you approve from recurring tasks.
PostHog: product analytics in the software.
Slack: in addition to Slack connections you set up, we use Slack for our own internal alerts about account and billing events.
Google Fonts: serves the typefaces on our websites.
Cal.com: call scheduling.
Attio: customer relationship management for inquiries and diagnostic submissions.

We also use general business tools, such as email, document, and accounting software, to run our company and deliver CFO services.

When you connect other services, such as QuickBooks Online (Intuit), Xero, Puzzle, Slack, or Granola, information moves between those services and us under your authorization. Each of those services has its own terms and privacy policy.

We do not sell your personal information, and we do not use the financial data you connect for advertising.

We share information:

with service providers supporting the Services (see section 9);
with other users in your account, based on the roles and permissions your account sets. For example, a CFO Firm’s team members can see the client workspaces they manage, and client users can see what the firm shares with them;
at your direction or with your permission, such as when you approve a Slack post or email, publish a page or portal report, or connect another service;
with a tax professional you choose or one of our tax partners, when you ask us to hand off your records at year end as part of the CFO services;
during business transfers, such as a merger, acquisition, financing, or sale of assets;
when required by law; or
to protect legal rights, security, or safety.

11. Data security

We use commercially reasonable administrative, technical, and organizational safeguards to protect customer information. These include:

encrypted connections (HTTPS) to the software;
encryption of the access tokens and API keys we store for your connected services;
separate, private storage for each workspace’s uploaded files;
role-based permissions for users;
approval before content is sent outside the software; and
audit logs of connection changes and other important actions.

However, no internet transmission or storage system can be guaranteed completely secure. If we learn of a security incident that affects your personal information, we will notify you as required by law.

12. Data retention and deletion

We retain information for as long as reasonably necessary to:

provide the Services;
comply with legal obligations;
resolve disputes;
enforce agreements; and
improve our products.

Software data

While your account is active, we keep the data in your workspaces, including data imported from connected accounts, so the software can show history and keep reports working.
After you disconnect an account, we keep the data already imported until you delete it or the workspace is deleted (see section 4).
Deleting a client workspace (CFO Firm accounts). The account owner can delete a client workspace in the software. The workspace can be restored for 7 days. After that, we permanently delete its data, including uploaded files, and ask connected providers to revoke our access. The account owner can also choose to delete a workspace permanently right away by typing its name to confirm.
If your account closes. When a subscription ends or an account is closed, we keep its data only as long as reasonably necessary for the purposes listed above. You can ask us to delete it sooner.
Other deletion requests. To delete a Company account, a CFO Firm account, or your user account, contact us using the details in section 17.
Records we keep after deletion. We keep limited records after deletion, such as AI usage and billing records with the workspace and user details removed, and a record that the deletion happened. Copies of deleted data may remain in backups for a limited time.

CFO-services records

We keep engagement records, including the documents you share and the work we produce, for as long as needed to provide the CFO services and for the purposes listed above. When you remove our access to your systems, we stop accessing them, and you keep the work we have delivered.

When appropriate, information is securely deleted or anonymized.

13. Your rights and choices

Depending on your location, you may have rights to:

access your information;
correct inaccurate information;
request deletion;
request data portability; and
object to certain processing activities.

Requests may be submitted using the contact information in section 17. We may need to verify your identity before we act on a request.

If your information is in a workspace controlled by one of our customers, such as a CFO firm that manages your company’s finances or your employer, please send your request to that customer. We will help them respond.

You can also:

update your profile in the software;
disconnect connected accounts at any time (see section 4);
manage cookies in your browser (see section 8); and
unsubscribe from marketing emails using the link in the email.

14. Children’s privacy

Our Services are intended for businesses and are not directed toward children under the age of 13. We do not knowingly collect personal information from children.

15. International users

Our primary database and application servers are located in the United States. If you access the Services outside the United States, your information may be transferred to and processed in countries where we or our service providers operate.

16. Changes to this policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with a revised date. If we make a material change, we will also notify account owners by email or in the software.

17. Contact

Questions about this Privacy Policy, and privacy requests, may be sent to:

Piggy Banker (Raterman Group LLC)
1115 Town Creek Drive Unit 738, Austin, Texas 78741
Email: clay@piggybanker.io