Privacy Policy

Effective April 28, 2026

1. Introduction

This Privacy Policy describes how Equity (“Equity,” “we,” “us”) collects, uses, and shares information in connection with our software-as-a-service platform (the “Service”). It applies to information about businesses that sign up for the Service, the people who administer those accounts, and the customers who become member-owners of those businesses.

2. Information we collect

We collect:

Account information: name, email address, business name, role, and password hash.
Business and operational data: entity details, sharing configuration, governance records, and audit history.
Transaction and member data: imported from connected integrations (e.g. point-of-sale, accounting), including order amounts, dates, customer identifiers, and loyalty events.
Documents you upload: financial documents (such as P&L statements) you choose to upload, and the data extracted from them.
Usage data: log data about your interactions with the Service, including IP address, device and browser information, and referring pages.
Cookies: session cookies needed to keep you signed in and a small number of preference cookies. We do not use third-party advertising cookies.

3. How we use information

We use the information we collect to:

provide, operate, and maintain the Service;
compute distributions, generate reports, and produce tax documents;
communicate with you about your account and updates to the Service;
detect, prevent, and respond to fraud, abuse, and security incidents;
comply with legal obligations.

We do not sell personal information, and we do not use it for cross-context behavioral advertising.

4. Third-party integrations

When you connect a third-party service (such as Square or QuickBooks), we access only the data you authorize through that integration’s OAuth scopes, and we use that data solely to provide the Service. Tokens for those integrations are encrypted at rest. You can disconnect any integration at any time from the Settings page.

We use the following categories of subprocessors to operate the Service: cloud hosting, database storage, file storage, email delivery, and AI inference for document extraction. A current list of subprocessors is available on request.

5. AI and document extraction

If you upload a document for AI-assisted extraction, the document is sent to our AI provider for the purpose of extracting structured data (for example, line items from a P&L). The provider acts on our behalf as a subprocessor, does not use your data to train models, and does not retain it beyond what is needed to return a response.

6. How we share information

We share information only as follows:

With members of your business: data you choose to share within your account (e.g. distribution amounts) is visible to authorized users of that business.
With service providers: subprocessors that help us run the Service, under written agreements that restrict their use of the data.
For legal reasons: when required by law or to protect the rights, safety, or property of Equity, our users, or others.
In a business transfer: in connection with a merger, acquisition, or sale of assets, with notice to you where required by law.

7. Data retention

We retain account and operational data for as long as your account is active and as needed to provide the Service. We retain certain records (for example, audit logs and tax documents) for longer where required by law. On account deletion, we will delete or de-identify your data within a reasonable period, except for records we are required to retain.

8. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest for sensitive fields, scoped access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising your rights.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe we have collected information from a child under 13, contact us and we will delete it.

11. International transfers

We are based in the United States and process data there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

12. Changes

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. The “Effective” date at the top reflects the latest version.

13. Contact

For privacy questions or to exercise your rights, contact privacy@equity.app.