Privacy Policy

1. Who we are

Tally is an AI accounts-receivable assistant for independent businesses (the "Service"). This policy explains what information we collect, how we use it, and the choices you have. Tally is operated by Kynth Studios, Isaiah Kim, sole proprietor. Contact: hello@kynth.studio.

2. Information we collect

From your account: the email you sign in with, your business name, your voice profile / workflow preferences, and billing information processed by Stripe.

From integrations you connect: when you OAuth into QuickBooks, Xero, Stripe, HubSpot, or Gmail, Tally stores the resulting access + refresh tokens (encrypted at rest). Tally then reads invoice records, client/customer records, and (for Stripe Connect) payment status from the connected account using the read-only scopes you granted.

Generated content: the draft reminder emails Tally writes for you, along with the prompts sent to Anthropic Claude to generate them. Drafts are stored in your Tally workspace until you delete them or your account.

3. How we use it

We use this information solely to operate the Service: syncing your invoices, drafting follow-ups, sending those follow-ups when you approve them, and showing you the resulting dashboard. We do not sell, rent, share, or aggregate your invoice or client data across customers for any reason.

4. Third-party processors

We share specific data with the following providers strictly to operate the Service:

• Anthropic — your voice profile + invoice context, to generate draft reminders. Anthropic does not train on customer prompts.
• Stripe — your billing email + payment method for Tally subscriptions.
• Resend — outbound email transport when you use the Tally-branded sender.
• AWS — managed Aurora Postgres hosting for your account data; encrypted at rest.
• Vercel — application hosting + request logs (no payload bodies retained).
• Supabase — authentication (email + identifier only).

Data we receive from QuickBooks, Xero, Stripe Connect, HubSpot, or Gmail flows only into your own Tally workspace. We do not forward provider data to any third party.

5. Data retention

We retain your account, invoice sync data, and drafted reminders while your Tally account is active. If you delete your account, we permanently remove your data within 30 days and revoke integration tokens immediately. You can request an export of your data at any time by emailing the support address.

6. Your choices

You can disconnect any integration at any time from the Integrations page in your dashboard. Disconnecting revokes Tally's access and removes the stored tokens; previously synced invoice data remains in your workspace until you delete the account.

You can delete your Tally account from Settings → Delete account. This permanently removes all your data within 30 days.

7. Security

OAuth tokens are encrypted at rest. All traffic is over TLS. We follow the principle of least privilege when requesting integration scopes (read-only on accounting data; send-only on Gmail). We are not SOC 2 audited at this stage and disclose this honestly — appropriate for evaluating whether Tally fits your compliance posture.

8. Changes & contact

We may update this policy; material changes will be posted here with a new "last updated" date and emailed to the account address. Questions: hello@kynth.studio.