Privacy Policy

Cordai Financial Intelligence, Inc. ("Cordai", "we", "us", or "our") is committed to protecting the privacy of our customers and their financial data. This Privacy Policy explains how we collect, use, store, and protect information when you use the Cordai FP&A platform and associated services.

By accessing or using Cordai, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

We collect information necessary to provide and improve our services:

• Account information — name, email address, company name, and role when you register or are provisioned by your organization.
• Financial data — general ledger data, chart of accounts, budget records, and related financial records that you connect to Cordai through ERP and accounting integrations (e.g., QuickBooks, NetSuite, Sage, SQL Server).
• Usage data — queries submitted to the AI assistant, features accessed, session timestamps, and interaction logs used to improve accuracy and performance.
• Device and connection data — IP address, browser type, and operating system for security and access logging purposes.

2. How We Use Your Information

• To provide, operate, and maintain the Cordai platform and your workspace.
• To process and respond to financial queries submitted through the AI assistant.
• To generate reports, dashboards, and analyses based on your connected data.
• To send service-related communications such as access confirmations and security alerts.
• To improve platform performance, model accuracy, and user experience — using only aggregated, de-identified data.

We do not use your financial data to train AI models without your explicit consent.

3. Data Isolation and Security

Each customer workspace is logically isolated. Your financial data is never shared with, accessible to, or visible by other Cordai customers.

• All data is encrypted in transit using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256.
• Access to customer workspaces is restricted to authorized users within your organization.
• Our infrastructure is hosted on industry-standard cloud providers with SOC 2 Type II certifications.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination:

• Your workspace data will be deleted within 30 days of account closure.
• Backups are purged within 90 days.
• You may request early deletion by contacting privacy@cordai.ai.

5. Third-Party Services

Cordai integrates with third-party ERP and accounting platforms at your direction. We access only the data necessary to provide the service and do not sell or share your data with any third party for marketing purposes.

We may engage sub-processors (e.g., cloud infrastructure providers, AI inference services) who are contractually bound to maintain appropriate data protection standards. A current list of sub-processors is available upon request.

6. Your Rights

Depending on your location, you may have rights under applicable privacy laws (including GDPR and CCPA) including the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Data portability — receiving your data in a structured, machine-readable format.

To exercise any of these rights, contact us at privacy@cordai.ai.

7. Cookies

Cordai uses strictly necessary cookies to maintain your authenticated session. We do not use advertising or cross-site tracking cookies. Analytics, if used, are limited to aggregate, non-identifiable usage metrics.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify customers of material changes via email or an in-platform notice at least 14 days before they take effect. Continued use of Cordai after changes become effective constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Email: privacy@cordai.ai
• Address: Cordai Financial Intelligence, Inc., United States