Legal

Privacy Policy

Last updated April 16, 2026

Equated is built for businesses that want cleaner books without giving up control of their financial data. This Privacy Policy explains what we collect, how we use it, and how we handle business and personal data submitted through the Service.

1. Privacy Commitments

  • We collect information to operate, secure, support, and improve Equated, not to build an advertising business around your data.
  • We do not sell personal information or customer financial records.
  • Equated does not use customer-submitted content to train AI models unless the customer explicitly agrees.
  • We limit access to data to personnel and service providers who need it for legitimate business purposes.
  • We keep data for only as long as reasonably necessary for the purposes described in this Policy and to meet legal, security, and operational obligations.

2. Scope

This Privacy Policy applies to information we collect through Equated’s website, application, APIs, demos, sales and support communications, and other related services.

For customer-submitted accounting and operational data, Equated generally acts as a service provider or processor on behalf of the business customer that controls the underlying data. If you use Equated through your employer or another organization, that organization may also have its own privacy and data governance policies that apply to your use.

3. Information We Collect

We collect information from three primary sources: directly from you, automatically through use of the Service, and from third-party services you choose to connect.

Business Contact and Account Data

  • business contact details such as name, work email, job title, organization name, and billing contact information;
  • account credentials and workspace setup information;
  • support requests, sales communications, and onboarding details.

Customer Content and Financial Records

  • documents, records, prompts, support attachments, and other content submitted through the Service;
  • bank transaction data, receipts, bills, invoices, chart of accounts data, ledger metadata, inbox or email-derived documents, and uploaded files that customers choose to upload or connect.

Usage, Log, and Device Data

  • log and usage data such as IP address, browser type, device information, timestamps, pages visited, feature usage, and error events;
  • security and audit data needed to authenticate users, investigate incidents, and maintain service integrity;
  • cookies and similar technologies used to keep sessions active, remember preferences, and understand how the website and product are used.

Third-Party Integration Data

  • identity and login data from authentication providers you choose to use;
  • financial, banking, email, or document data from integrations you authorize, including Quiltt and its underlying provider Mastercard and MX;
  • limited operational data from service providers needed to run account connectivity and related product operations.

4. How We Use Information

  • provide, maintain, and secure the Service;
  • use Customer Data to provide requested accounting workflows, automations, reconciliations, and AI-assisted suggestions;
  • ingest, organize, classify, reconcile, and present customer data within Equated workflows;
  • communicate about accounts, demos, support issues, security notices, product updates, and administrative matters;
  • monitor usage, diagnose problems, detect abuse, and improve the reliability and usefulness of the Service;
  • use usage, log, and device data in aggregated or de-identified form to improve performance, reliability, and product design;
  • comply with legal obligations and enforce our terms.

5. How We Share Information

We may share information in the following circumstances:

  • with service providers and subprocessors that help us operate the Service, including Quiltt and its underlying provider Mastercard and MX;
  • with integrations or counterparties when you direct the Service to connect or transmit information;
  • with your organization’s administrators, authorized users, advisors, or designees based on your workspace configuration and permissions;
  • if required to comply with law, regulation, legal process, or to protect the rights, safety, and security of Equated, our users, or others;
  • in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality measures.

6. Data Control and Customer Responsibility

Customers are responsible for determining what data they choose to submit to Equated and for ensuring they have the authority to share that data with us and with any integrations they enable.

Customers are also responsible for ensuring they have the rights and permissions to submit all business and personal data included in Customer Data.

When Equated processes customer-submitted accounting or financial data on behalf of a business customer, we do so to provide the Service under the customer’s instructions and applicable agreements.

7. Retention

We retain information for as long as needed to provide the Service, maintain security and audit trails, resolve disputes, enforce our agreements, and satisfy legal obligations. Retention periods may vary depending on the nature of the data and the context in which it was collected.

Some information may be retained for security logs, audit trails, legal compliance, dispute resolution, and fraud prevention even after account closure or deletion requests.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or disclosure. No system is completely secure, and we cannot guarantee absolute security.

9. Your Choices

You can contact us to request access, correction, or deletion of certain personal information, subject to legal and contractual limitations. If your data was submitted to Equated by an organization, we may direct your request to that organization.

If data was submitted by a business customer, Equated may require the request to come through that customer’s authorized administrator.

You can also manage cookies through your browser settings, though some parts of the Service may not function properly if cookies are disabled.

10. AI Model Training

Equated does not use customer-submitted content to train AI models unless the customer explicitly agrees.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice where appropriate.

12. Contact

Questions about this Privacy Policy can be sent to hello@useinterlay.com.