Privacy Policy

Effective date: April 16, 2026

Turaco Labs Inc. ("Turaco Labs," "we," "us," or "our") operates the Seiv mobile application and website (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, and share your information when you use the Service.

By using Seiv, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create a Seiv account, we collect the following through our authentication provider, Clerk:

• Your name
• Your email address
• Your profile picture (if provided by your identity provider)

We do not collect or store passwords. Authentication is handled entirely by Clerk via OAuth 2.0.

1.2 Business Information

During onboarding, you provide:

• Business name
• Country of operation
• Currency
• Timezone
• Fiscal month-end preference
• Report schedule preferences (frequency and time)

1.3 Financial Data from Connected Sources

When you connect a data source (such as Google Sheets, QuickBooks, Xero, Shopify, Plaid, or Zoho Books), we access your financial data through that provider's API. Specifically:

• Google Sheets: We request read-only access to your Google Drive and Google Sheets using the scopes spreadsheets.readonly and drive.readonly. We never modify, write to, or delete your spreadsheets.
• QuickBooks, Xero, Shopify, Plaid, Zoho Books: We request read-only access to financial data including transactions, account balances, invoices, and related records through each provider's API.

We store OAuth access tokens and refresh tokens to maintain your connection. The financial data extracted from your connected sources is processed to generate reports and is stored in our database.

1.4 AI Chat Conversations

When you use the Seiv AI assistant, we store:

• Your messages (questions you ask)
• AI-generated responses
• Conversation thread history

1.5 Generated Reports

We store financial reports generated from your data, including:

• Key Performance Indicators (revenue, cash position, margins, receivables, payables, inventory)
• Profit and loss statements
• Cash flow summaries
• AI-generated narrative summaries and anomaly notes

1.6 Device and Usage Information

We collect analytics data through PostHog, including:

• Device type and operating system
• App interaction events (screens visited, features used)
• Session replay recordings of your in-app activity

1.7 Push Notification Tokens

If you enable push notifications, we store your device's push notification token to deliver alerts about completed reports, detected anomalies, and connector errors.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and maintain your account
• Connect to your financial data sources on your behalf
• Extract, structure, and analyze your financial data to generate reports
• Generate AI-powered narrative summaries, trend analysis, and anomaly detection
• Respond to your questions through the AI chat assistant
• Deliver scheduled reports at the times you configure
• Send push notifications about report status, anomalies, and connector issues
• Improve the Service through analytics and usage patterns

3. How We Share Your Information

We share your information with the following third-party service providers, solely to operate the Service:

We do not sell, rent, or trade your personal information or financial data to any third party. We do not share your data with advertisers.

4. AI Data Processing

Seiv uses Anthropic's Claude AI to process your financial data. When reports are generated or you use the AI chat, the following data may be sent to Anthropic's API:

• Raw spreadsheet cell data (up to 100 rows per tab) for financial data extraction
• Extracted financial metrics (revenue, expenses, margins, balances) for narrative generation
• Your chat messages and recent report data for AI chat responses
• Your business name and currency for context

Anthropic processes this data according to their API terms of service. Anthropic does not use API inputs to train their models. We do not use your financial data to train any AI models.

5. Data Storage and Security

Your data is stored in Convex, a cloud database platform. We implement the following security measures:

• All data is transmitted over HTTPS/TLS encryption
• Authentication is handled by Clerk with industry-standard OAuth 2.0 and JWT validation
• Access to your data requires valid authentication tokens
• Data source connections use OAuth 2.0 with provider-specific scopes limited to read-only access

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure.

6. Data Retention

• Account data: Retained as long as your account is active.
• Financial reports: Retained as long as your account is active. You can request deletion at any time.
• Chat conversations: Retained as long as your account is active.
• OAuth tokens: Retained as long as the data source connection is active. Tokens are deleted when you disconnect a source.
• Analytics data: Retained according to PostHog's data retention policies.

When you delete your account, we will delete your personal data, business data, reports, chat history, and stored OAuth tokens within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data and account
• Export your data in a portable format
• Withdraw consent for data processing at any time
• Object to certain types of data processing
• Revoke access to connected data sources at any time through your account settings or directly through the data source provider

To exercise any of these rights, contact us at hello@seivai.com.

8. Children's Privacy

Seiv is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Turaco Labs Inc.
Email: hello@seivai.com