Effective October 7, 2026
This policy explains what information lateralCFO collects, how we use it, who we share it with, and the control you have over it. lateralCFO is operated by lateralCFO, Inc., a Delaware corporation with its principal office at 12345 Parklawn Dr, Ste 200 #1016, Rockville, MD 20852. Contact us at hello@lateralcfo.com.
Account information. Your name, email address, and password (stored only as an encrypted hash, never in readable form).
Business profile. Information you enter about the business: its name, industry, description, number of employees, years operating, revenue model, fiscal year, and similar context.
Financial information from your accounting software. Profit and loss and balance sheet reports, account balances, invoice totals and counts, and the chart of accounts you map. This is read from QuickBooks Online or Xero once you connect them.
Payment information. Name, email, billing address and card details, collected and held by our payment processor. Card numbers never reach lateralCFO's systems.
Usage and support information. Anything you send us when you contact support or report an issue.
Information collected automatically. When you use the service we and our providers log technical information: your IP address, browser type and version, operating system and device type, the pages or screens you view, how long you spend on them, the site you came from, navigation paths, and access times. In our marketing emails we use pixels that record whether a message was opened or a link clicked.
You authorize the connection through QuickBooks' or Xero's own sign-in process. We never see or store your accounting credentials; we hold only an access token issued by the provider.
We read only. lateralCFO retrieves financial reports and balances. We do not create, modify or delete anything in your books, and we do not connect to or access bank accounts.
You can end it at any time. Disconnecting from Settings revokes the connection with QuickBooks or Xero directly, so access ends on their side as well as ours, and all syncing stops immediately.
We use it to provide the service: to build your forecast and scorecard, to generate written insight on your figures, to produce exports, to administer your subscription, and to respond when you contact us. We also use aggregate, non-identifying information to understand how the product is used and to improve it.
lateralCFO uses artificial intelligence to turn your figures into written analysis. Our AI provider is Anthropic.
What we send. Your financial figures, and the business profile you entered at setup — industry, business description, headcount, revenue model and similar context. That context is what makes the analysis specific to your business rather than generic.
What we do not send. We do not send your company name, the names of representatives, or other personally identifying information, unless you have entered such information into the business description yourself.
How it is handled. Under our provider's commercial terms, your information is not used to train their models. Insight generated for your account is visible only within that account.
Accounting access tokens are encrypted with AES-256-GCM before they are stored, and the encryption key is held separately from the database. All information is encrypted in transit. Access to production systems is restricted to those who need it.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you and any regulator as the law requires, without undue delay.
We rely on the following providers to run lateralCFO. Each receives only what it needs for its function.
| Provider | Function | What it receives |
|---|---|---|
| Supabase | Database and authentication | Account details, business profile, financial history, encrypted connection tokens |
| Vercel | Application hosting | Traffic to the service |
| Stripe | Payment processing | Name, email, billing address, card details |
| Anthropic | AI-generated analysis | Financial figures and business profile, as described in section 5 |
| Intuit (QuickBooks Online) | Accounting data source | The authorized connection |
| Xero | Accounting data source | The authorized connection |
| Resend | Transactional email | Email addresses, for invitations and service messages |
| Kit | Marketing email | Email address and name, for those who opt in |
We will update this list when a provider changes and will note the change in this policy.
We do not sell your information, we do not share it with advertisers, and we never use one customer's figures to inform another customer's analysis.
We disclose information only in these circumstances:
Where an accountant, bookkeeper or advisor uses lateralCFO to manage a client's books, that practitioner determines what information is held and how it is used. They are the controller of that information and lateralCFO acts as their processor.
A business whose accounting information is held in lateralCFO may contact us directly at hello@lateralcfo.com to request deletion of that information or a copy of it, whatever its practitioner wants. We will verify the business and the individual making the request before acting on it, and we will tell the account holder that the request was made and honored.
We keep your information for as long as your account exists, so that your history and targets are there if you return after a lapse. Cancelling a subscription does not delete anything.
When you delete your account or an individual client's data, we remove it from our live systems immediately. Residual copies may persist in encrypted backups for a limited period before being overwritten in the normal course.
Payment and invoice records are retained by our payment processor for seven years, as tax and anti-fraud law requires. These contain billing information only, never accounting data.
We use cookies that are necessary for the service to function, including keeping you signed in. We also use basic website analytics to understand how our marketing pages are found and used. These receive no financial information. You can block cookies in your browser, though parts of the service will not work without the necessary ones.
Some browsers send a "Do Not Track" signal. There is no common standard for how services should respond to it, and we do not currently respond to it.
lateralCFO is a business product and is not directed to anyone under 18. We do not knowingly collect information from children.
lateralCFO is operated from the United States and this policy is written to United States law. We do not currently offer the service on the basis of compliance with the EU General Data Protection Regulation or the California Consumer Privacy Act. If you are subject to those regimes, consider whether lateralCFO is appropriate for your use before connecting any data.
We may update this policy. We will post the updated version with a new effective date, and where changes are material we will notify account holders by email.
Questions, or requests about your data: hello@lateralcfo.com
lateralCFO, Inc., 12345 Parklawn Dr, Ste 200 #1016, Rockville, MD 20852