Privacy Policy
Effective date: October 14, 2026
Coastal AI LLC ("Coastal AI", "we") builds private business websites for its clients, including Command Center, which reads a client's accounting data to produce reports. This policy explains what information we handle, why, and how we protect it.
Who this covers
This policy covers the people at our client companies who use the websites we build for them, and the business information those websites read from our clients' own systems, such as QuickBooks Online. Each client has signed an agreement with us; where that agreement says something more specific, the agreement controls.
What we collect
- Account information. The name, work email address and role of each person a client sets up to sign in.
- Business data the client connects. For example, from QuickBooks Online: accounts, customers, vendors, deposits, payments, bills, checks, card purchases and journal entries. The connection is read only. We never change, pay, move or file anything in a client's systems.
- Basic technical information. Sign in times and a record of important actions (for example, who connected or disconnected QuickBooks), kept so the client can see who did what.
We do not collect or store bank account numbers, routing numbers, Social Security numbers, tax identification numbers, card numbers, or individual employees' pay rates. Where a source system includes such fields, they are removed before anything is stored.
How we use it
We use client data only to provide the service the client asked for: building their reports, checks and alerts, and supporting them. We do not sell data, share it for advertising, or use it to train artificial intelligence models.
Who else handles it
We use a small number of service providers to run the websites, each bound by its own security and confidentiality terms:
| Provider | What it does |
|---|---|
| Vercel | Hosts the website |
| Supabase | Stores the data in an encrypted database |
| Anthropic | Writes short plain language explanations of figures that our software has already calculated; its commercial terms do not allow training on our data |
| Resend | Sends an email only when a person clicks Send |
| Intuit | Provides QuickBooks Online data when the client connects it |
We do not otherwise share client data, except where the law requires it.
Where it is kept and how it is protected
Data is stored only in the United States. Each client has its own database. All connections use encryption, data is encrypted at rest, and connection keys for systems like QuickBooks are kept in an encrypted vault that only our server software can read. Access within each website is limited by role, and staff accounts use multi factor authentication.
If we learn of unauthorized access to a client's data, we tell the client within 72 hours.
How long we keep it
We keep data while we provide the service. A client can disconnect QuickBooks at any time from the website's Settings page, which stops all reading immediately. When a client asks, or when our work for them ends, we return or delete their data within 30 days.
Your choices
People at a client company can ask their own company's administrator, or us, to see, correct or delete their account information. Requests about a company's business data are handled with that company.
Contact
Coastal AI LLC, toneill@coastalai.io
We will post any changes to this policy on this page with a new effective date.