Privacy Policy

Ray-B Projects ("we", "us", or "our") operates MyAdvisely (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. By using MyAdvisely, you agree to the practices described in this policy.

1. Information We Collect

a) Information you provide directly

• Account information: email address, password
• Business profile: business name, industry, country, currency, timezone, locations
• Financial data: income and expense transactions you log, including vendor names, amounts, descriptions, and categories
• Uploaded files: receipts, invoices, PDF and CSV documents you submit for processing
• Voice recordings: audio captured when using voice input (processed immediately, not stored)
• Communications: messages you send to our support team

b) Third-party integration data (optional)

If you choose to connect third-party accounts, we access the following data on your behalf:

• Square: completed payment transactions (amount, currency, date, note) and basic merchant profile information. We do not access customer personal data, card details, or banking information. Connection is established via Square OAuth — your Square credentials are never stored by MyAdvisely, only the OAuth access token issued by Square.
• QuickBooks Online: business transaction records including purchases (expenses), sales receipts, and paid invoices (amount, date, vendor/customer name, account category). We access this data in read-only mode to display financial insights. We do not write data back to QuickBooks. Your Intuit credentials are never stored — only the OAuth access token and refresh token issued by Intuit.

You may disconnect any third-party integration at any time from your Profile settings. Disconnecting stops future data imports but does not delete previously imported transactions from MyAdvisely.

c) Information collected automatically

• Usage data: pages visited, features used, time spent in the app
• Device information: browser type, operating system, screen size
• Log data: IP address, access timestamps, error logs
• Cookies and local storage: used to maintain your session and preferences (e.g. dark/light mode, daily briefing settings)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your financial data using AI to generate insights, summaries, and reports
• Personalise your experience (e.g. daily briefings, timezone-aware responses)
• Process payments and manage your subscription
• Send transactional emails (receipts, account notices, security alerts)
• Respond to support requests and communications
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your financial data for advertising purposes.

3. AI Processing of Your Data

MyAdvisely uses OpenAI's API to process your financial data and generate responses. When you log a transaction, ask a question, or upload a document, relevant data is sent to OpenAI for processing. This processing is subject to OpenAI's Privacy Policy.

We minimise the data sent to AI systems — only the information necessary to fulfil your request is transmitted. We do not use your data to train AI models.

4. How We Share Your Information

We may share your information with the following categories of third parties:

• Supabase — database and authentication hosting (PostgreSQL)
• Render — backend server hosting
• Vercel — frontend hosting
• OpenAI — AI processing (GPT, Whisper, TTS)
• Paddle — payment processing and subscription management
• Square (optional) — if you connect your Square account, we exchange OAuth tokens with Square's API to retrieve your payment transaction data. Square's use of data is governed by the Square Privacy Policy.
• Intuit/QuickBooks (optional) — if you connect your QuickBooks Online account, we exchange OAuth tokens with Intuit's API to retrieve your business transaction data in read-only mode. Intuit's use of data is governed by the Intuit Privacy Statement.

We may also disclose your information if required by law, court order, or government authority, or to protect the rights and safety of our users and the public.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your account:

• Your data is retained for up to 90 days to allow for account recovery
• After 90 days, your personal data and financial records are permanently deleted
• Anonymised or aggregated data may be retained for analytics purposes
• Some data may be retained longer where required by applicable law

6. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted storage of sensitive data at rest
• Row-level security in our database (your data is isolated from other users)
• Secure JWT-based authentication
• Regular security reviews

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Request your data in a machine-readable format (CSV export is available in-app)
• Objection: Object to certain types of processing
• Withdrawal of consent: Withdraw consent where processing is based on consent

To exercise any of these rights, email us at support@myadvisely.com. We will respond within 30 days.

8. Cookies and Local Storage

We use cookies and browser local storage for essential functionality, including:

• Keeping you signed in across sessions
• Remembering your preferences (dark/light mode, briefing settings)
• Storing your business logo locally on your device

We do not use third-party advertising cookies or tracking pixels. You can clear cookies and local storage via your browser settings, though this may affect your experience.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

10. International Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where our service providers (Supabase, OpenAI, Render, Vercel) operate. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for any such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the Service. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: