Privacy Policy

• Account information — name, email, password (stored only as a secure hash), and authentication details.
• Business content you provide — the information you enter to build plans, budgets, forecasts, documents, and other outputs, including financial figures and contacts you add.
• Payment information — handled by our third-party payment processor; we do not store full card numbers.
• Usage & device data — log data, IP address, browser/device information, and how you interact with the Service.
• Cookies — used for authentication, preferences, and analytics (see Section 7).

We use information to provide, operate, secure, and improve the Service; to generate the documents and outputs you request; to process payments and manage subscriptions; to communicate with you; to provide support; and to comply with legal obligations. We do not sell your personal information for money.

To generate plans, projections, recommendations, and other content, portions of the information you submit may be sent to third-party artificial-intelligence providers that process it on our behalf to return generated output. These providers act as our service providers under contractual confidentiality and security obligations. AI-generated output may be inaccurate or incomplete and should be independently verified. We do not authorize our AI providers to use your business content to train their public models except as permitted by their enterprise/service-provider terms.

We share information only as described here:

• Service providers — hosting, payment processing, email delivery, analytics, and AI processing, bound to protect the data and use it only to provide their service.
• At your direction — for example, when you email or export a document to a banker, investor, or collaborator.
• Legal & safety — when required by law, legal process, or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We use reasonable administrative, technical, and organizational safeguards to protect your information, but no method of transmission or storage is completely secure. We retain information for as long as your account is active or as needed to provide the Service and comply with our legal obligations, after which we delete or de-identify it.

We use cookies and similar technologies for sign-in/session management, remembering preferences, and understanding usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights. To make a request, contact us at privacy@threelilbrds.com. We will verify and respond as required by applicable law.

We do not sell your personal information.

California (CCPA/CPRA): California residents have the right to know, access, delete, correct, and limit the use of sensitive personal information, and to opt out of “sale” or “sharing” (we do not sell or share for cross-context behavioral advertising for money).

Virginia, Colorado, Connecticut, Utah & other states: residents of states with comprehensive privacy laws have similar rights to access, correct, delete, and obtain a copy of their data, and to opt out of targeted advertising and certain profiling.

Residents of all other U.S. states and counties retain whatever privacy rights their local laws provide; we honor verified requests to the extent applicable law requires.

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time and will revise the “Effective date” above. Questions or privacy requests may be directed to privacy@threelilbrds.com.