Privacy Policy

1. Scope

This Privacy Policy explains how Tearleads, LLC (“Tearleads,” “we,” “us,” or “our”) handles information when you use our websites, applications, and related services (the “Service”). It applies to account holders and to people whose information an authorized user places in a Tearleads workspace.

A Tearleads organization is a shared workspace. Information placed in an organization may be available to other authorized members of that organization according to their roles and group access.

2. Information we collect

Account and security information

We collect information used to create and secure your account, such as your name, email address, authentication credentials in protected form, email-verification status, multi-factor authentication settings, active sessions, organization memberships, roles, and invitations.

Workspace information

We collect the information you or other authorized users add to the Service. Depending on the features you use, this may include business names, EINs, incorporation dates, addresses, documents, uploaded files, inbound emails and attachments, audit templates and results, issue assignments, notes, labels, and related activity records.

Financial information from Plaid

If you choose to connect a financial institution, we use Plaid to request up to 24 months of account and transaction history. We may receive and store:

• institution and account details, including institution name, account name, account type and subtype, account mask, balances, and currency;
• transaction details, including transaction and authorization dates, amount, currency, merchant or description, category, payment channel, and pending status; and
• Plaid-generated identifiers, synchronization state, and an encrypted access token needed to refresh the connection.

We do not receive or store the username and password you enter into Plaid Link for your financial institution. Plaid and your financial institution handle that connection.

Technical information

We and our infrastructure providers may process IP address, browser and device information, request timestamps, security events, and diagnostic logs. The Service also uses cookies and browser storage that are necessary for authentication, account switching, preferences, and Plaid connection flows.

3. How we use information

We use information to:

• provide, operate, synchronize, and maintain the Service;
• display and help authorized users organize files, messages, audits, businesses, accounts, and transactions;
• authenticate users, enforce organization permissions, prevent fraud and abuse, and protect the Service;
• respond to requests, troubleshoot problems, and improve reliability;
• comply with law and enforce our agreements.

We do not use customer financial data to advertise to you or to make lending, credit, insurance, or employment decisions.

4. Plaid and connected financial accounts

Plaid processes information when you use Plaid Link and when it maintains a connection to your financial institution. Plaid’s handling of that information is governed by the Plaid End User Privacy Policy. You should review it before connecting an account.

Tearleads uses Plaid data to import, synchronize, display, filter, reconcile, and let authorized organization members annotate financial accounts and transactions. We request only the Plaid Transactions data used for these features. You may disconnect an institution in the Finance page or manage your Plaid connections through Plaid Portal.

5. How we disclose information

We may disclose information only as needed:

• Within your organization. Authorized workspace members can access organization information based on their roles and groups.
• To service providers. Providers such as Cloudflare and Plaid process information for hosting, storage, security, email, and financial connectivity under their agreements with us.
• For legal and safety reasons. We may disclose information if reasonably necessary to comply with law, lawful process, or to protect people, rights, and the security of the Service.
• In a business transaction. Information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to this Policy and applicable law.
• At your direction. We may disclose information when you or an authorized organization administrator directs us to do so.

These disclosures are not sales of customer information. We will never sell customer information.

6. Security

We use administrative and technical safeguards designed to protect customer information. These include encrypted network connections, organization-scoped access controls, optional multi-factor authentication, monitoring, and encryption of Plaid access tokens before storage. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

7. Retention and deletion

We retain information while it is needed to provide the Service, meet legal obligations, resolve disputes, and protect the Service. Our Data Retention Policy explains the feature-specific deletion controls and timelines for organizations, inbound email, Plaid-connected financial information, security records, and recovery copies.

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of certain personal information. You may also have the right to appeal a response or complain to a privacy regulator. We may need to verify your identity and authority before acting on a request.

Use the Service’s organization, inbox, and Finance controls where available. For other privacy requests, email privacy@tearleads.com. Plaid also provides independent connection and data controls through Plaid Portal.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18.

10. Changes to this Policy

We may update this Policy as the Service or law changes. We will post the updated version here and change its effective date. If a change materially affects how we use previously collected information, we will provide additional notice when required by law.

11. Contact

Questions or requests about this Policy can be sent to privacy@tearleads.com.