YarehIQ Privacy Policy

Effective date: [effective date] · Version: 2026-11-08

This Privacy Policy explains how [YarehIQ legal entity], a subsidiary of CollectIQ Technologies LLC ("YarehIQ," "we," "us") collects, uses, and shares information when businesses ("Customers") use YarehIQ to keep their books. YarehIQ is business software; it is not intended for consumers or for anyone under 18.

1. Our role

  1. For the financial records in Customers' books (their customers, vendors, transactions, invoices, bills, and reports), we act as a service provider that processes information on the Customer's behalf and under its instructions. The Customer decides what to record and is responsible for having the right to share it with us. If you are a customer, vendor, or employee of a business that uses YarehIQ, contact that business with questions about your information.
  2. For account, billing, and website information about our Customers, we decide how it is used, as described below.

2. Information we collect

From Customers and their Users

  1. Account information: names, business names, email addresses, phone numbers, login credentials, and role.
  2. Billing information: billing contact and plan details. Card or bank details for paying us are collected and stored by our payment processor; we do not store full card numbers.
  3. The books themselves: companies, charts of accounts, journal entries, invoices, bills, payments, contacts (customers and vendors, including names, addresses, emails, payment terms, and, where the Customer enters it for Form 1099 purposes, a vendor's taxpayer identification number), bank statement files, reconciliations, and notes.
  4. Support requests and feedback.

From services the Customer connects

  1. Bank data: if the Customer connects a bank account through a bank-data provider (such as Stripe Financial Connections), the account name, last four digits, balances, and transactions the Customer authorizes. We never receive the Customer's bank login credentials.
  2. Payroll data: if the Customer connects a payroll provider, payroll totals and the entries needed for the books. Employee details stay with the payroll provider except what is needed to record payroll in the books.
  3. Other software: for example, invoices, bills, and payments sent by BlaqueIQ.

Automatically

  1. Basic technical logs (IP address, browser, pages requested, errors) and an activity log of changes to the books, used for security, troubleshooting, and the Customer's audit trail.
  2. Essential cookies or similar storage needed to keep you signed in and remember which company you are working in. We do not use advertising cookies, third-party analytics, or cross-site tracking.

3. How we use information

  1. To provide the Service: keeping books, matching and categorizing transactions, reconciliations, reports, and connections the Customer turns on.
  2. To use AI features: transaction descriptions may be sent to our AI provider to suggest categories. We do not use this information to train AI models, and our AI provider does not use it to train models.
  3. To secure the Service, prevent fraud, and keep audit records.
  4. To bill Customers and provide support.
  5. To send service notices and, for Customers, product updates (you can opt out of product updates).
  6. To comply with law and enforce our Terms.

4. How we share information

We do not sell personal information, and we do not share it for targeted advertising. We share information only:

  1. With the Customer whose account it belongs to, and with the people and services the Customer directs (for example, an invoice emailed to the Customer's client, or reports shared with the Customer's accountant).
  2. With service providers that help us run the Service, under contracts that limit their use of the information:
    • Hosting and database: Railway (United States)
    • AI processing: Anthropic
    • Payments for YarehIQ subscriptions: Stripe
    • Bank data, if the Customer connects it: Stripe Financial Connections or another provider the Customer chooses
    • Encrypted off-site backups: GitHub (backups are encrypted before they leave our servers)
  3. With services the Customer connects, such as payroll providers and BlaqueIQ.
  4. With CollectIQ Technologies LLC, our parent company, only as needed to operate and support the Service.
  5. For legal reasons: to comply with law, a subpoena, or court order; to protect rights, safety, and property; or to investigate fraud.
  6. In a business transfer, such as a merger or sale of assets, subject to this Policy.

5. Retention

  1. We keep Customer Data for as long as the Customer's account is active. After cancellation, the Customer has 30 days to export it, and we delete it within 90 days after that.
  2. Some records are kept longer where the law or legitimate business needs require it, such as our own billing records and security logs.
  3. Encrypted backups expire on their normal schedule (currently 14 days).
  4. Customers are responsible for keeping their own books and records for as long as tax and other laws require. Export your books before cancelling.

6. Security

We use encryption in transit (HTTPS), encrypted backups, access controls, separation between Customers' data, and an activity log of changes. No system is perfectly secure. We will notify affected Customers of a confirmed security breach as required by law, including Florida's breach notification law.

7. Your choices and rights

  1. Customers can view, correct, export, and delete their data in the Service or by contacting us, and can disconnect bank, payroll, or other connected services at any time.
  2. Customers' clients, vendors, and employees should contact the business that keeps their information. We will help that business respond.
  3. Depending on your state, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to opt out of certain uses. To make a request, contact [legal contact email]. We will verify your request and respond as the law requires, and we will not discriminate against you for making it.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Where information is stored

Information is stored and processed in the United States.

10. Changes to this Policy

We may update this Policy. For material changes, we will notify Customers by email or in the Service before the change takes effect, and update the effective date above.

11. Contact

[YarehIQ legal entity], a subsidiary of CollectIQ Technologies LLC
Miami, Florida
[legal contact email]