Privacy Policy

Scotty AI, operated by Nexxsuite, LLC (“Scotty AI,” “we,” “us”), provides accounting and bookkeeping software at scottyai.com (the “Service”). This policy explains what information we collect, how we use and protect it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.

We collect the following categories of information:

• Account information — name, email address, mobile phone number (if provided), organization name, and authentication credentials.
• Billing information — payment method details processed by our payment processor; we do not store full card numbers ourselves.
• Accounting data you enter — chart of accounts, customers, vendors, transactions, invoices, bills, and supporting documents you upload.
• Connected-service data — data received from third-party services you connect, including QuickBooks Online, bank-feed providers, and email/calendar integrations.
• Usage data — log data such as IP address, browser, pages viewed, and timestamps, used for security and product improvement.
• Ad measurement data (only if you opt in) — that a trial started, a hashed event ID, the ad click ID from the link you arrived on, your IP address, and browser user agent. See Optional ad measurement below.

When you connect a QuickBooks Online (“QBO”) company to Scotty AI, we receive and store the following categories of data from Intuit on your behalf:

• Chart of accounts, classes, and items
• Customers, vendors, and employees
• Invoices, bills, payments, deposits, transfers, journal entries, and other transactions
• Attachments and notes associated with the above
• Company metadata (company name, fiscal year, base currency, etc.)

We use this data solely to provide the Service to you and your organization — including mirroring, categorization, reporting, reconciliation, and AI-assisted bookkeeping features. We do not sell QBO data, and we do not share it with third parties for their own marketing or advertising purposes.

You can disconnect QuickBooks Online from Scotty AI at any time from Integrations → QuickBooks, or from your Intuit account’s “My Apps” page. Disconnecting stops further data synchronization. To request deletion of QBO data previously received, see Data retention and deletion below.

We use the information we collect to:

• Operate, maintain, and improve the Service
• Mirror and synchronize data between Scotty AI and your connected services
• Generate reports, suggestions, and AI-assisted categorizations
• Authenticate you and protect your account
• Process payments and manage your subscription
• Send transactional and account-related messages (see SMS Notifications Terms for SMS specifics)
• Comply with legal obligations and enforce our Terms of Service

We share information only with vendors that help us operate the Service, each bound by contractual confidentiality and data-protection obligations. These currently include:

• Vercel — application hosting
• Supabase — database hosting and authentication
• Inngest — background job processing
• Sentry — error monitoring (technical data about failures, not your books)
• Stripe — payment processing
• Twilio — SMS delivery (for users who opt in)
• Resend — transactional email delivery
• Intuit — QuickBooks Online API access
• OpenAI and Anthropic — language-model providers that power assistant and categorization features, used through their business API terms, under which your data is not used to train their models
• Meta Platforms, Inc. — advertising measurement, only if you opt in (see below)

We do not sell personal information. We may disclose information when required by law, subpoena, or court order, or to protect the rights, property, or safety of Scotty AI, our users, or others.

When you sign up you can tick an optional, unticked box allowing us to tell Meta that you started a trial, so we can measure which of our ads work. If you leave it unticked, nothing is sent to Meta and no Meta code runs.

• If you opt in, Meta’s pixel loads only on the trial confirmation page, after Stripe confirms your trial, and sets Meta’s advertising cookies (_fbp, _fbc) there. No Meta code runs on bookkeeping screens.
• Our server may also send the same event to Meta’s Conversions API so it is counted if a browser blocks the pixel. A single event ID ensures one trial is counted once.
• We send that a trial started, the time, a one-way hashed event ID, the ad click ID, your IP address, and browser user agent. We never send your name, email, phone, bank data, transactions, or anything from your books.
• Consent lasts 30 days. A Global Privacy Control signal turns it off. You can turn it off on the trial confirmation page or by emailing support@scottyai.com.

Depending on your state, you may have the right to know what personal information we hold, get a copy, correct it, delete it, and opt out of targeted advertising or “sharing.” To make a request, email support@scottyai.com from the address on your account. We will verify your identity, respond within 45 days, and not treat you differently for asking. If we decline, you can appeal by replying to our decision, and you may contact your state attorney general. You may use an authorized agent.

We do not sell personal information. Opt-in ad measurement may count as “sharing” for cross-context behavioral advertising under California law; it is off unless you turn it on. We use sensitive information, such as financial account data, only to provide the Service.

Scotty AI is offered to businesses in the United States, and your data is processed in the United States and wherever our service providers operate.

We retain your data for as long as your account is active. After you close your account we retain your books and account records for seven years, in line with common tax and accounting record-keeping periods, so you or your accountant can export them or reopen the account, and then delete or anonymize them.

You can request deletion of your account and associated data — including data received from QuickBooks Online — by emailing support@scottyai.com from the email address on your account. We will confirm and complete the deletion within 30 days, except for records we are required to retain by law.

We use industry-standard technical and organizational measures to protect your information, including TLS in transit, encryption at rest for credentials and tokens, least-privilege access controls, and audit logging. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at support@scottyai.com.

You can:

• Update your account information from Settings
• Disconnect any third-party integration from Integrations
• Opt out of SMS notifications at any time (see SMS Notifications Terms)
• Request a copy of your data or its deletion by contacting support

The Service is business software for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact us so we can delete it.

We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, notify users by email or in-product notice.

Scotty AI, operated by Nexxsuite, LLC
1244 Harwood Road, Bedford, Texas 76021-4244
support@scottyai.com
scottyai.com