Privacy Policy

1. Our Commitment to Your Privacy

Cycle Financial ("Cycle," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our applications, products, services, and websites (collectively, the "Services").

This policy explains:

• What data we collect when you sign up and use our Services
• How we manage your information throughout our relationship
• What choices you have regarding your data

2. How We Use Your Information

We use your personal information only for legitimate business purposes, including:

• Providing, maintaining, and improving our Services
• Processing transactions and managing your accounts
• Verifying your identity and preventing fraud
• Communicating with you about our Services and offerings
• Complying with legal and regulatory requirements
• Protecting the legal rights, property, and safety of Cycle and our users
• Developing new features and AI-powered categorization improvements

3. Information We Collect

3.1 Information You Provide Directly

We collect information you provide when creating an account or using our Services:

• Name, email address, phone number, and date of birth
• Government-issued identification numbers (for identity verification)
• Business information (company name, address, tax details)
• Payment card and bank account details
• Information provided during account setup, verification, or support requests

3.2 Transaction Data

We collect details about your transactions, including when, where, and how they occur, the devices and payment methods used, and the parties involved.

3.3 Device Information

We automatically collect information about the devices you use to access our Services, including:

• Hardware model and operating system
• Unique device identifiers
• Mobile network information
• Browser type and version
• IP address

3.4 Location Data

We may collect location data to help prevent fraudulent use of our Services and to provide location-based features. You can control location access through your device settings.

3.5 Usage Data

We collect information about how you interact with our Services, including pages visited, features used, time spent, and interaction patterns.

3.6 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Cookies: Small data files stored on your device to manage engagement, remember preferences, and collect aggregated analytics
• Web Beacons: Electronic images used to deliver cookies and measure engagement with our Services and emails

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity verification services and publicly available sources
• Consumer reporting agencies for eligibility and fraud assessment
• Banking partners and financial institutions
• Plaid Inc.: When you connect a bank account, credit card, or treasury account, we use Plaid to securely retrieve your account and transaction data. Your use of Plaid's services is also subject to the Plaid End User Privacy Policy
• ERP and Accounting Providers: When you connect an ERP or accounting system, such as QuickBooks, Xero, or NetSuite, we retrieve and, where two-way sync is enabled, write back financial data (including entities, transactions, and journal entries) as necessary to provide our Services
• Third-party services you choose to connect

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, data storage, analytics, and customer support
• Financial Partners: With financial institutions, payment processors, and payment card networks as necessary to provide our Services
• Bank Connection Providers: With Plaid Inc. to establish and maintain secure connections to your bank accounts, credit cards, and treasury accounts
• ERP and Accounting Providers: With the ERP or accounting systems you connect, to read and, where two-way sync is enabled, write back financial data on your behalf
• Merchants: We may share data with a merchant if you open a payment dispute for a transaction with that merchant
• Legal Requirements: With government and law enforcement agencies when required by law or legal process
• Safety and Security: When necessary to protect the security of our Services or the safety of our users
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information
• Aggregated Data: We may share anonymized, aggregated information that cannot identify individuals

5. Data Security

We take reasonable measures, including administrative, technical, and physical safeguards, to help protect your personal data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

Our security practices include:

• Data encryption at rest and in transit
• Firewalls and intrusion detection systems
• Secure server authentication
• Regular security audits and testing
• Employee training on privacy and security standards
• Access controls and authentication mechanisms

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Choices and Rights

6.1 Account Information

You can review and update your personal information through your account settings or by contacting us at privacy@usecycle.ai.

6.2 Location Data

You can control location access through your device settings. Please note that disabling location access may affect certain features of our Services.

6.3 Cookies

Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, some features of our Services may not function properly without cookies.

6.4 Marketing Communications

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email. You may also opt out of promotional text messages. Please note that you will continue to receive transactional messages related to your account and Services.

6.5 Push Notifications

You can choose whether to receive push notifications through your device settings. Our Services will function without push notifications enabled.

6.6 Online Tracking and Advertising

You can opt out of interest-based advertising by visiting aboutads.info. We do not currently respond to "Do Not Track" browser signals.

6.7 Data Subject Rights

Depending on your location, you may have additional rights under applicable privacy laws, including the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@usecycle.ai.

7. Third-Party Analytics

We use third-party analytics services, including Google Analytics, to help us understand how users interact with our Services. These services may collect information about your use of our Services and other websites, which helps us improve our offerings and user experience.

8. Third-Party Websites and Services

Our Services may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party websites, and we make no representations regarding the privacy policies or practices of any third-party websites. We encourage you to review the privacy policies of any third-party services you use.

9. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. When you close your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain it for legal, regulatory, or compliance purposes.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@usecycle.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes that significantly affect how we use your personal information, we will notify you in advance via email or through our Services. The updated policy will be effective upon posting, with a revised "Last updated" date.

Your continued use of our Services after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: