Privacy Policy

• Account info: name, business name, email, language preference.
• Documents you upload (bank statements, receipts, invoices, etc.) and transactions extracted from them.
• Bank connection metadata when you link accounts (institution, account masks, balances). We do not store online-banking credentials.
• Billing metadata returned by our payment processor (no card numbers).
• Conversations with the NuBu AI assistant.

We use your data solely to operate the service for you: categorize transactions, generate reports, power NuBu responses, and manage your subscription. We do not sell your data and do not use it to train public AI models.

• Hosting & database: Lovable Cloud (Supabase) — encrypted at rest and in transit.
• Payments & tax: Stripe (handles cards, tax calculation, and dispute management).
• Bank connectivity: Plaid, when you link an account.
• AI: Lovable AI Gateway (Google Gemini, OpenAI) for document parsing, categorization, report generation, and NuBu chat.
• Email: Lovable Email for transactional notifications.

When you link a bank or credit-card account, we use Plaid to fetch account metadata (institution name, account type, mask, balances) and historical transactions. Plaid Link is served by Plaid directly — we never see your online-banking username or password. We store only a Plaid access token so we can request updates on your behalf.

Plaid Link controls which accounts and how much history you can select at connection time; those choices are set by your institution and Plaid's product configuration, not Numerus. You can disconnect at any time — see "Your deletion rights" below.

Plaid's use of end-user data is governed by their End-User Privacy Policy.

We retain your data for as long as your account is active. If you cancel your subscription without deleting your account, your data remains accessible but transaction syncing stops. Billing and tax records are retained for the period required by applicable law (generally up to 6 years for Puerto Rico and U.S. federal tax purposes) even after account deletion. Backup copies are purged within 30 days of a deletion request. See "Right to deletion" below for how to request deletion at any time.

• Disconnect a single bank: Portal → Bank Accounts → open the account → Delete. You can choose whether to also delete the transactions imported from that account. If it's your only link to that institution, we call Plaid's /item/remove endpoint so their servers stop syncing us.
• Delete your entire account: Portal → Settings → Danger zone → Delete my account. We revoke every Plaid connection, then delete your profile, bank connections, transactions, journal entries, documents, and reports. Encrypted backups are purged within 30 days.
• Export or manual request: email support@numerusllc.net.

We do not sell your data or use third-party advertising trackers. We may use minimal, privacy-respecting analytics to understand aggregate site usage (e.g., page views) and essential cookies to keep you logged in. We do not use cookies to build advertising profiles.

Numerus Business Solutions is intended for business owners and is not directed at individuals under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact support@numerusllc.net and we will delete it.

See our Security & Encryption page for details on encryption, access control, and two-factor authentication.

You can access, correct, export, or delete your data at any time. Contact us for any privacy request.

If you are a resident of a U.S. state with its own data privacy law, you may have additional rights under that law; contact us and we will do our best to accommodate applicable requests even where not strictly required in Puerto Rico.

We may update this Privacy Policy as our practices evolve or as required by law or our service providers (including Plaid). We will update the effective date above when we do. Continued use of the service after a change constitutes acceptance of the revised policy.

Privacy questions: support@numerusllc.net · Numerus LLC, San Juan, Puerto Rico.