Privacy Policy

1. INFORMATION WE COLLECT

We collect the following categories of personal information.

Information Customers and Authorized Users provide. When a Customer signs up or uses the Services, we collect identifiers and professional information such as name, business name, email address, phone number, login credentials, and role.

Information about end-clients and their finances. To provide the Services, Customers and their connected systems provide information about end-clients and their businesses, which may include identifiers, business and contact details, financial account information, transaction records, bookkeeping data, payroll-related information, and tax-related information (including information used to prepare or estimate tax filings). Some of this information may be considered sensitive under applicable law.

Information from connected accounts and integrations. With authorization, the Services connect to third-party systems (such as accounting ledgers, bank accounts through financial-data connectivity providers, and payment or payroll systems) and receive information from those systems to provide the Services.

Information we collect automatically. When you use our websites or applications, we automatically collect device and usage information such as IP address, browser type, device identifiers, pages viewed, and interactions, using cookies and similar technologies. See “Cookies and Tracking” below.

Communications. If you contact us or communicate through the Services (including by messaging channels we support), we collect the content of those communications and related metadata.

2. HOW WE USE INFORMATION

We use personal information to:

• provide, operate, maintain, secure, and improve the Services;
• perform bookkeeping, categorization, reporting, tax-estimation, and related functions Customers request, including through the AI features described in Section 3;
• communicate with Customers and Authorized Users about the Services, including service, security, and administrative messages;
• provide customer support and respond to requests;
• monitor, detect, prevent, and address fraud, security incidents, abuse, and technical issues;
• comply with legal obligations and enforce our agreements; and
• where permitted by law and applicable consent requirements, send marketing communications about our Services (you may opt out at any time).

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use end-client tax or financial information to serve advertising.

3. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

Artificial intelligence is central to how the Services work, and we want to be clear about how we use it.

How we use AI. The Services use AI and machine-learning features to assist Customers, including automatically categorizing transactions, generating bookkeeping and tax-related estimates and recommendations (such as a real-time individual income tax estimate), summarizing information, and answering questions. To provide these features, the Services send relevant information to third-party AI model providers that generate output, which is then returned through the Services.

We do not train AI models on your tax or financial information. Propio does not use tax return information or other Customer or end-client data to train its own or any third party's generative AI or machine-learning models. We use third-party AI providers under terms that prohibit those providers from using the information we send them to train their models and that limit the providers' retention of that information to what is necessary to deliver the feature.

Limited use of de-identified and aggregated data. We may create and use aggregated and de-identified data (data that does not identify any Customer, Authorized User, or end-client) to operate, secure, analyze, and improve the Services. We do not use tax return information to train generative AI models.

AI output requires professional review. AI features support, and do not replace, the professional judgment of the Customer. AI output may be incorrect or incomplete and is provided to assist qualified professionals, who are responsible for reviewing and verifying it. AI output is not professional advice from Propio.

Automated decision-making. The Services do not use personal information to make decisions that produce legal or similarly significant effects about an individual without human involvement. The AI features provide information and suggestions that the Customer (a qualified professional) reviews and acts on. Where applicable law gives individuals rights regarding automated decision-making or profiling, we honor those rights as described in Section 7 and applicable law.

4. HOW WE DISCLOSE INFORMATION

We disclose personal information in the following ways.

To service providers. We use third-party service providers to operate and deliver the Services. These providers fall into categories that include artificial-intelligence and machine-learning processing, cloud hosting and infrastructure, bank-account connectivity, payment processing, payroll processing, customer communications, and analytics. We provide them only the information needed to perform their functions, and we require them, or rely on their applicable terms, to protect the information and use it only to provide their services to us. We do not identify our individual service providers in this Privacy Policy.

To and at the direction of Customers. Where Propio processes end-client information on behalf of a Customer, that information is made available to the Customer and handled according to the Customer's instructions and its own agreements and privacy practices.

For legal and safety reasons. We may disclose information to comply with law, regulation, legal process, or governmental request; to enforce our agreements; to protect the rights, property, safety, or security of Propio, our Customers, or others; and to detect, prevent, or address fraud, security, or technical issues.

In connection with a business transaction. If Propio is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to customary protections.

Aggregated or de-identified information. We may disclose aggregated or de-identified information that does not identify any individual for business, research, or analytics purposes.

5. HOW WE PROTECT INFORMATION

We maintain an information security program with administrative, technical, and physical safeguards designed to protect personal information, consistent with applicable law, including the safeguards expected of businesses that handle financial and tax information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as needed to provide the Services, for the period a Customer maintains its account, and as needed for legitimate business purposes such as security, recordkeeping, dispute resolution, and legal compliance. When information is no longer needed, we take reasonable steps to delete or de-identify it. Customers can request export or deletion of data as described in their agreement with us and in Section 7.

6. FINANCIAL AND TAX INFORMATION

Because the Services handle financial and tax information, certain federal laws apply to how that information is used and disclosed, including the Gramm-Leach-Bliley Act (which governs nonpublic personal financial information) and provisions of the Internal Revenue Code that govern the use and disclosure of tax return information by those who handle it. We handle this information consistent with those laws and use it to provide the Services requested by the Customer. Customers are responsible for obtaining any consents required from their end-clients for the processing of tax and financial information through the Services.

7. YOUR PRIVACY CHOICES AND RIGHTS

Depending on where you live and your relationship with Propio, you may have rights regarding your personal information under applicable state privacy laws, which may include the rights to access, correct, or delete personal information, to obtain a copy of it, to opt out of certain processing, and to not be discriminated against for exercising your rights.

Important note for end-clients. Much of the information Propio processes belongs to end-clients and is processed on behalf of a Customer. If you are an end-client and wish to exercise rights regarding your information, please contact the Customer (the firm or professional you work with), who is responsible for that information. We will support our Customers in responding to those requests. If you contact us directly, we may refer your request to the relevant Customer.

Financial-information note. Certain financial and tax information we handle is governed by federal financial-privacy law, and some state-privacy-law rights may not apply to that information. We will honor the rights that apply under the laws relevant to you.

Marketing choices. You can opt out of marketing emails using the unsubscribe link in those messages or by contacting us. We may still send you non-marketing messages about the Services.

8. COOKIES AND TRACKING

We use cookies and similar technologies on our websites and applications to operate the sites, remember preferences, analyze traffic, and improve the Services. You can manage cookies through your browser settings; disabling some cookies may affect functionality. Our online data collection may not respond to all “Do Not Track” signals. Where required by law, we honor recognized opt-out preference signals.

9. CHILDREN'S PRIVACY

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information directly from children under the age of 13. If you believe a child has provided us personal information directly, contact us so we can take appropriate action.

10. INTERNATIONAL USERS

The Services are operated in the United States and are intended for users in the United States. If you access the Services from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your location.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy with a new “Last updated” date and, where appropriate, provide additional notice. We encourage you to review this Policy periodically. Your continued use of the Services after an update means you acknowledge the updated Policy.

12. CONTACT US

If you have questions about this Privacy Policy or our privacy practices, contact us at: