Privacy policy

Kept.ly turns a year of bank, card and payment-platform activity into an accountant-ready tax package. It does not file a return and it does not give tax advice. This policy says what we collect, what a machine-learning model sees, and how you take your data out.

• Your email address and sign-in method (magic link or Google).
• Transactions you import by file, by connecting a bank through Plaid, or by connecting Stripe.
• Documents you upload: statements, W-2s, 1099s, receipts, prior returns.
• The categories, rules and answers you give while reviewing.

Transaction text sent for classification is normalized first: account numbers, card numbers and names are stripped. The model sees a merchant, an amount, a date and the category list.

Documents are different. A statement, W-2 or 1099 goes to the model whole, including names, addresses, account numbers and, on a W-2, your Social Security number, through a signed link that expires in minutes. We use the Anthropic API under its zero-data-retention terms, which means the provider does not store or train on what it reads.

• Every table is protected by row-level security: another user cannot read your rows.
• Social Security numbers and employer identification numbers are encrypted at rest and never sent to the browser in full.
• Bank access tokens live only in an encrypted vault and are read only by background jobs.
• Files sit in private storage behind links that expire in ten minutes; every download is logged.
• Nightly encrypted backups go to a second provider so a single outage cannot lose a tax year.

We share data with the services that run the product: Supabase (database and storage), Vercel (hosting), Inngest (background jobs), Anthropic (document reading and classification), Plaid (bank connections, when you connect one), Resend (email), and Sentry (error reports, with personal data scrubbed). We do not sell data and we do not show ads.

• Export every tax year as a single archive from Settings.
• Delete your organization and its data from Settings. We keep backups for 30 days, then they are gone.
• Merchant memory across users is opt-in, carries only merchant names and categories, and never amounts or who you are.

Questions go to privacy@kept.ly.