Privacy Policy

Introduction

SpeedReview ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our accounting automation platform and related services.

For website, demo-request, and direct commercial data, SpeedReview generally acts as the organization responsible for deciding how that information is used. For accounting and client data submitted by a customer, SpeedReview generally processes that data on the customer's instructions under the applicable agreement.

Information We Collect

Information You Provide

• Account Information: Name, email address, company name, phone number, and billing information when you register for an account.
• QuickBooks Data: When you connect your QuickBooks Online account, we access transaction data, chart of accounts, vendor information, and other accounting data necessary to provide our services.
• Bank-Feed Data: When enabled, Plaid provides account and transaction information from the financial institutions you choose to connect.
• Documents: Receipts, invoices, statements, and related metadata that you choose to upload for review.
• Consultation Requests: Contact details and meeting information submitted through Calendly or by email.
• Communications: Information you provide when contacting our support team or responding to surveys.

Information Collected Automatically

• Usage Data: Information about how you use our platform, including features accessed, time spent, and actions taken.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: We use cookies and similar technologies to enhance your experience and analyze usage patterns.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our accounting automation services
• Process transactions and send related information
• Generate AI-assisted categorization, document extraction, and analytical suggestions for your tenant
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

AI Processing and Model Training

Customer accounting data is not used to train shared models or models for other customers. Corrections, learned rules, and tenant-specific configuration remain scoped to that customer.

When AI-assisted features are enabled, relevant transaction or document content may be sent to Google's Gemini service to generate a requested suggestion or analysis. Customer-specific corrections and learned rules remain scoped to that customer. See the Security page for the current subprocessor list and contact us for contract-specific data-handling terms.

Legal Bases for Processing

Where a legal basis is required, we process personal information as necessary to:

• Perform a contract: provide the service, support users, and administer customer accounts.
• Pursue legitimate interests: secure, operate, and improve the service; respond to business inquiries; and prevent misuse.
• Obtain consent: use optional cookies or marketing communications where consent is required.
• Meet legal obligations: maintain records and respond to valid legal requests.

Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Customer data is encrypted in transit and at rest using industry-standard controls.
• Access Controls: Managed authentication and role-based access controls restrict access to authorized users.
• Security Review: Security is reviewed throughout product development, with control details and supporting documentation available during customer diligence.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete your data within 30 days, except where required by law to retain certain records. You can request immediate deletion by contacting support.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request a portable copy of your data.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, please contact us at contact@speedreview.ai.

Canadian privacy requests are handled with reference to applicable federal and provincial laws, including PIPEDA and British Columbia's PIPA. California residents may also have rights under the CCPA/CPRA, including access, correction, deletion, and information about disclosures. We do not sell personal information or share it for cross-context behavioral advertising.

Third-Party Services

Depending on the features a customer enables, we use the following service providers:

• Intuit QuickBooks: To access and sync your accounting data.
• Plaid: To connect supported financial institutions and receive bank-feed data.
• Google (Gemini): To provide AI-assisted categorization, extraction, and analysis when enabled.
• Calendly: To schedule product consultations and send meeting details.
• Clerk: To provide account authentication and identity services.
• AWS: To provide cloud infrastructure and file storage where configured.
• PostHog and Google Analytics: To understand website or product usage when the applicable analytics service is enabled.
• Stripe: To process payments when billing by card is enabled.

These providers have their own privacy policies governing the use of your information.

International Data Transfers

SpeedReview and its providers may process information in Canada, the United States, and other countries where they operate. Where required, we use recognized transfer safeguards, such as contractual data-protection terms or Standard Contractual Clauses. Contact us for the safeguards applicable to a specific customer arrangement.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: contact@speedreview.ai
• Address: SpeedReview, Vancouver, BC, Canada
• Security reports: Use the subject line "Security" when emailing contact@speedreview.ai.