1About this policy
This Privacy Policy explains how Guided Business Intelligence LLC, an Arkansas limited liability company (“GBI,” “we,” “us,” or “our”), collects, uses, shares, and protects information in connection with the PIRP platform, websites, and applications (the “Service”). It applies to the account holders and businesses that use PIRP. By using the Service, you agree to this policy and to our Terms of Service.
2Information we collect
Account information
When you create an account, we collect your name, email address, business name, and authentication credentials. Passwords are handled through our authentication provider and are stored in hashed form.
Business and financial information you provide
As you use the Service, you may enter business information directly — for example, metric values, owner hours, your Flight Plan and goals, Flightlog targets and weekly numbers, answers to PIRP’s questions, add-backs and other figures you state, documents you upload, decisions you log, and similar inputs that power your metrics and coaching.
Connected accounting data
If you connect an accounting system such as Intuit QuickBooks Online, we access financial data from that system on a read-only basis to provide the Service. This may include profit-and-loss and balance-sheet figures, revenue, expenses, cash balances, payroll/labor totals, accounts receivable and payable, and customer- or product-level summaries. We access only the data needed to compute and display your metrics, monitoring, and coaching. See Section 6.
Connected Google data
If you connect a Google account, we access the following on a read-only basis, only for the specific Google services you authorize: Google Analytics — website and traffic metrics such as sessions, users, traffic sources, and conversions; Google Business Profile — customer reviews and star ratings for locations you manage; and Google Ads — campaign performance metrics such as spend, clicks, impressions, conversions, and cost per conversion. See Section 6.
Connected field service data
If you connect a field service management system such as Jobber, we access job, quote, invoice, and customer summary data from that system on a read-only basis to compute your operating metrics.
Connected bank and card data
If you connect bank or credit card accounts through Plaid, we receive, on a read-only basis, account names and types, balances, and transactions (such as date, amount, merchant or payee, and category), and for credit cards, details such as balance, interest rate, minimum payment, and due date. We do not receive your bank login credentials. See Section 6.
Crew, investors, and documents
If you invite crew members, we collect their names and email addresses and record what they enter. If you approve a connection with an investor or lender, we collect the names and email addresses of that firm’s users. Investor firms may upload deal documents, which we process to extract the terms they confirm.
Payment information
Subscription and purchase payments are processed by our payment provider, Stripe. We receive limited billing details (such as plan, status, and the last four digits of a card) but we do not collect or store full payment-card numbers; Stripe handles those directly.
Usage and device data
We collect standard log and usage data (such as actions taken in the app, timestamps, IP address, browser and device type) to operate, secure, and improve the Service.
3How we use your information
- Provide, maintain, and secure the Service and your account.
- Compute your metrics, benchmarks, reserve estimates, wealth-gap analyses and other value estimates, scenarios, and monitoring alerts.
- Generate your daily briefings, coaching, and other AI-assisted content (see Section 4).
- Process subscriptions, purchases, and Jet Card mile transactions.
- Provide support, communicate with you about the Service, and respond to your requests.
- Detect, prevent, and address security incidents, fraud, and abuse.
- Improve the Service, including through aggregated and de-identified analysis (see Section 5).
- Comply with legal obligations and enforce our Terms.
4AI processing
Parts of the Service use third-party artificial-intelligence models (currently Anthropic) to generate briefings, summaries, scenarios, and coaching. To produce this output, we send the AI provider the business information the feature needs. This can include your business name, the names of customers, vendors, and payees that appear in your books, and what you type into the Service. Documents you upload for PIRP to read are sent as provided. We do not send the contact details from your account (such as your email address, phone number, or street address). We do not permit our AI provider to use your data to train its models. AI output is informational only and is not professional advice, as described in our Terms.
5How we share information
We do not sell your personal or financial information, and we do not share it for cross-context behavioral advertising. We share information only as follows:
- Service providers (subprocessors) who help us run the Service under contract, including: our cloud database, authentication, and hosting infrastructure provider (Supabase, which runs on cloud infrastructure); our payment processor (Stripe); our bank-data provider (Plaid); our email provider (Resend); the third-party systems you connect (such as Intuit QuickBooks Online, Jobber, and Google LLC); and our AI model provider (Anthropic). These providers may process your data only to perform services for us.
- People you authorize — crew members you invite and investors or lenders whose connection you approve, limited to what you choose to share with them. While PIRP is in beta, PIRP staff also have a view-only seat on each business so we can check that your data is being read correctly.
- Aggregated or de-identified data that does not identify you or your business — for example, to build industry benchmarks or improve the Service.
- Legal and safety reasons — to comply with law, respond to lawful requests, or protect the rights, property, or safety of GBI, our users, or the public.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
6Your connected third-party data
We treat data from connected accounting systems with particular care:
QuickBooks Online
- Read-only. PIRP requests read-only access. We do not write to, modify, or delete your QuickBooks Online data, and PIRP never moves money or initiates transactions.
- Limited purpose. We use your accounting data solely to provide the Service to you — to compute and display your metrics, monitoring, and coaching. We do not use it for advertising and we do not sell it.
- Secure storage. Connection tokens are encrypted (AES-256), and each business’s data is logically isolated from every other business through row-level access controls.
- You control the connection. You may disconnect a connected accounting system at any time from your settings, which revokes PIRP’s ongoing access. You may also revoke access from within your QuickBooks Online account.
- Deletion. When you close your account, we delete the financial data synced from that connection within 30 days, except where we must retain limited records to meet legal, security, or accounting obligations. If you disconnect but keep your account, you can ask us to delete the data already synced.
Trademarks and non-affiliation. Intuit, QuickBooks, and QuickBooks Online are trademarks of Intuit Inc., used for identification only. PIRP and Guided Business Intelligence LLC are independent and are not affiliated with, endorsed by, or sponsored by Intuit Inc.
With your explicit consent through Google’s own authorization screen, PIRP may access Google Analytics metrics, Google Business Profile reviews and ratings, and Google Ads campaign performance metrics from Google accounts you control, on a read-only basis.
- Limited purpose. We use Google data solely to compute and display your metrics inside your own PIRP dashboard, alongside your other business data.
- Read-only. We do not post, edit, or reply to reviews. We do not create, modify, pause, or optimize advertising campaigns. We do not modify your Analytics configuration.
- Secure storage. Google connection tokens are encrypted at rest using AES-256-GCM and are accessible only to server-side processes.
- You control the connection. You may disconnect any Google connection at any time from your PIRP settings, which revokes our ongoing access. You may also revoke access directly at myaccount.google.com/permissions.
Limited Use. PIRP’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not transfer it except as necessary to provide the Service, and do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.
Trademarks and non-affiliation. Google, Google Analytics, Google Business Profile, and Google Ads are trademarks of Google LLC, used for identification only. PIRP and Guided Business Intelligence LLC are independent and are not affiliated with, endorsed by, or sponsored by Google LLC.
Bank and card accounts (Plaid)
- Read-only. PIRP receives account information, balances, and transactions through Plaid and never moves money or initiates transactions.
- Your credentials stay with Plaid. You sign in to your bank through Plaid; PIRP never receives your bank username or password. Plaid’s handling of your data is described in the Plaid End User Privacy Policy.
- Limited purpose. We use bank and card data solely to provide the Service to you, such as checking your books against your bank activity and showing your cash position. We do not use it for advertising, we do not sell it, and we do not use it to train artificial-intelligence models.
- Secure storage. Plaid access tokens are encrypted (AES-256) and accessible only to server-side processes.
- You control the connection. Disconnecting a bank or card account in PIRP removes the connection at Plaid. We also remove bank connections when you cancel your subscription, and after 75 days without a sign-in to your account.
7How we protect your information
We use reasonable technical and organizational safeguards designed to protect your information, including encryption of data in transit and at rest, encryption of accounting connection tokens, tenant isolation through row-level security, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8How long we keep your information
We retain your information for as long as your account is active and as needed to provide the Service. When you close your account, we delete your business’s data within 30 days. When you disconnect a data source, we stop collecting new data from it immediately, and you can ask us to delete the data already synced. Bank connections are removed at Plaid as soon as you cancel. We keep billing records for seven years, and copies in our backups expire on their normal schedule. We may also keep limited records where needed to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.
9Your choices and rights
- Access and correction. You can view and update much of your information within the Service.
- Disconnect integrations. You can disconnect any connected system at any time, including bank and card accounts.
- Deletion. You can request deletion of your account and associated data by contacting us.
- Marketing. You can opt out of non-essential emails using the unsubscribe link or by contacting us; we may still send service and transactional messages.
Depending on where you live, you may have additional rights under applicable privacy laws (such as the right to access, correct, delete, or restrict use of your information). To exercise any right, contact us atteam@pirp.app. We will not discriminate against you for exercising these rights.
10Cookies and similar technologies
We use cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in) and to understand and improve usage. You can control cookies through your browser settings, though some features may not function properly without them.
11Children’s privacy
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
12Third-party services and links
The Service integrates with and may link to third-party services (such as Intuit QuickBooks Online, Google, Jobber, Plaid, and Stripe). Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review them.
13Where we operate
The Service is operated from the United States and is intended for U.S.-based businesses. If you access the Service from outside the United States, you understand your information will be processed in the United States.
14Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
15Contact us
Guided Business Intelligence LLC
PIRP — team@pirp.app
14087 Degraff Rd, Rogers, AR 72756