How your data is handled

Read-only connections, encrypted credentials, and what the AI sees and does not.

Connections are read-only. QuickBooks, Stripe and the App Store are read, never written to.
The credentials for those connections are encrypted with AES-256-GCM before they are stored, with a key kept apart from the database.
Organizations are kept apart by the database itself, so one organization's data cannot be returned to another.
Written commentary is produced from computed totals, never individual transactions. Donor, vendor and grant recipient names are removed before anything is sent, and every figure in the text is checked against your books.
Your data is not used to train AI models.

More detail is on the security page and in the privacy policy.

Deleting your data

Delete any packet from the Library, along with the files behind it. To delete your organization's data entirely, email us and we will confirm when it is done.

Still stuck? Email canopydecks@gmail.com with the company name and what you were trying to do.