Privacy Policy

We collect information you provide directly to CafeTally, information created while you use the product, and information we receive from integrations you choose to connect.

• Account and contact information, such as name, email address, authentication details, and support messages.
• Store, team, inventory, product, recipe, pricing, expense, receipt, alert, and reporting data that you enter or upload.
• Usage, device, log, and diagnostic information that helps us keep CafeTally reliable, secure, and useful.
• Billing and subscription information processed through our payment provider.

If you connect a bank account through Plaid, you authorize Plaid to share selected financial information with CafeTally so we can provide finance, expense, cashflow, P&L, reconciliation, categorization, and reporting features.

Depending on the accounts and permissions you approve in Plaid Link, this may include:

• Bank or credit account identifiers, institution name, account name, account type, account subtype, account mask, and balances.
• Transaction data, including transaction date, amount, merchant or counterparty, category, payment channel, location metadata when available, and transaction identifiers.
• Plaid item, account, cursor, access, webhook, and sync metadata needed to maintain the connection and import updates.

CafeTally does not receive your online banking username or password from Plaid. We use Plaid access tokens to request permitted data from Plaid, and those tokens are treated as sensitive credentials.

We use collected information to operate and improve CafeTally, including to:

• Create and secure your account, authenticate users, and manage team access.
• Provide inventory, costing, finance, reporting, alerts, automations, and support features.
• Sync and classify Plaid transactions, detect duplicates, connect expenses to store activity, and generate financial summaries.
• Troubleshoot bugs, monitor performance, prevent abuse, protect accounts, and comply with legal obligations.
• Send service messages, product updates, security notices, and support responses.

We do not sell your personal information or Plaid-connected financial data. We share information only as needed to provide CafeTally, comply with law, protect rights and safety, or with your direction.

• Service providers that help us host, store, analyze, email, process payments, provide authentication, and operate the product.
• Integration providers you choose to connect, including Plaid for bank connectivity and Square if you authorize Square integrations.
• Professional advisors, authorities, or other parties when required by law or necessary to protect CafeTally, our users, or others.
• Successor entities if CafeTally is involved in a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate protections.

You can disconnect a bank connection from CafeTally in the product. When you disconnect, we revoke the Plaid Item where supported, stop future syncing for that connection, and delete imported transactions, account metadata, and related finance audit entries associated with that bank connection from active CafeTally product records.

If you clear all Plaid bank connections for a store, CafeTally removes the connected Plaid Items where supported and deletes the imported Plaid financial data associated with those bank connections from active CafeTally product records.

• We retain Plaid-connected data only as long as reasonably needed to provide the service, maintain business records, resolve disputes, comply with law, or honor your deletion request.
• If you delete your account or request deletion, we will delete or de-identify personal information and Plaid-connected data unless we are required or permitted to retain it.
• Backups and logs may retain limited data for a short period before they expire through normal retention cycles.

We use administrative, technical, and organizational safeguards designed to protect personal and financial data from unauthorized access, disclosure, alteration, and destruction.

• Access to sensitive financial data is limited based on role and product need.
• Plaid access tokens and other secrets are stored server-side and are not intentionally exposed to client-side code.
• Bank access actions may require additional verification when appropriate.
• No system is perfectly secure, so we continue to improve our controls as the product evolves.

We may use cookies, local storage, analytics, and similar technologies to keep you signed in, remember preferences, measure product usage, understand marketing performance, and improve CafeTally.

• You can control cookies through your browser settings, though some product features may not work correctly if cookies are disabled.
• We do not use Plaid-connected financial data for third-party advertising.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information.

• You can update certain account, store, team, and integration settings in CafeTally.
• You can opt out of non-essential marketing emails by using the unsubscribe link or contacting us.
• You can request access, correction, deletion, or a copy of your data by emailing us.

CafeTally is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the product, by email, or by updating this page.