Privacy Policy

1. Introduction

This policy explains what information Paytrove collects, why, and who it's shared with. Paytrove exists to detect your business's recurring payments and report the ones you confirm to commercial credit bureaus — that purpose shapes everything below.

2. Information We Collect

We collect:

• Account information: email, password (stored as a salted hash, never in plain text)
• Business information: company name, EIN, address
• Bank transaction data, through Plaid, for accounts you choose to link
• Obligations you confirm or reject, and any evidence links you attach to them

3. How We Use Your Information

Transaction data is used solely to detect recurring payment patterns — loans, rent, utilities, vendor payments — and present them for your review. We don't use linked account data for advertising, and we don't sell your data.

4. Information We Share

We share information with:

• Plaid, our bank data provider, to establish and maintain the connection to your linked accounts
• Commercial credit bureaus (Dun & Bradstreet, Experian, Equifax) — but only obligations you've individually confirmed, never automatically, and never your full transaction history
• Our hosting and database providers, solely to operate the Service

We don't share your data with anyone else.

5. Data Security

Bank access tokens are encrypted at rest. Passwords are hashed, never stored in readable form. Session credentials are hashed before storage, so a database compromise alone doesn't expose usable login sessions. No security measure is perfect, but this isn't a checkbox — it reflects how the system is actually built.

6. Data Retention

We retain your data for as long as your account is active, and as needed to meet furnisher recordkeeping obligations for anything actually reported to a bureau. You can request deletion of your account; some records may need to be retained longer where a bureau relationship requires it.

7. Your Rights and Choices

You control what gets reported — nothing goes to a bureau without your explicit confirmation. You can disconnect a linked bank account at any time, which revokes our access to it through Plaid. You can request a copy of your data or ask us to delete your account by contacting us below.

8. Children's Privacy

The Service is for businesses, not individuals, and isn't directed at or intended for use by anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated before they take effect.

10. Contact Us

Questions about this policy: privacy@paytrove.app