Privacy Policy

ROCO FINANCE AI – PRIVACY POLICY

Last Updated: December 15, 2025

Roco Finance AI, Inc. ("Roco," "we," "us," or "our") respects your privacy and is committed to protecting the personal and financial information you entrust to us. This Privacy Policy describes how we collect, use, and share your information when you use our QBO-integrated cash flow forecasting application (the "Service").

SCOPE AND CONSENT

By using the Service, you consent to the data practices described in this policy. This policy is designed to comply with applicable laws, including the Delaware Personal Data Privacy Act (DPDPA) and the California Consumer Privacy Act (CCPA).

INFORMATION WE COLLECT

We collect information to provide you with accurate 12-week cash flow forecasts and to power our AI Agent.

QuickBooks Online (QBO) Data: When you connect your QBO account, we collect financial data including invoices, bills, bank transactions, and chart of accounts via the Intuit API.
Account Information: Your name, email address, business name, and payment information.
Usage Data: Information about how you interact with the Service, including the "scenarios" you run and the feedback you provide to the AI Agent.
Device Information: IP address, browser type, and operating system.

HOW WE USE YOUR INFORMATION (AND HOW WE DON'T)

Permitted Uses. We use your data to:

Generate weekly cash flow forecasts and financial reports.
Train our proprietary AI Agent to improve prediction accuracy (using Aggregated Statistics only).
Provide customer support and billing.
Detect and prevent fraud.

AI Training and Automated Decision Making.

We use machine learning algorithms to analyze your financial patterns. We may use anonymized and aggregated data from your usage to retrain and improve our models.

Profiling: Our AI Agent creates a "financial profile" of your business to predict future cash positions. This constitutes "profiling" under Delaware and California law. You have the right to opt-out of profiling that produces legal or similarly significant effects (see Section 6).

Data Stewardship (Intuit Compliance).

Consistent with the Intuit Data Stewardship Principles:

WE DO NOT SELL YOUR DATA. We will never sell your personal or financial information to third parties, marketers, or data brokers.
We do not use your data for credit checks. We are not a consumer reporting agency.

SHARING YOUR INFORMATION

We may share your information with the following categories of third parties:

Service Providers (Subprocessors): Cloud hosting providers (e.g., AWS), payment processors (e.g., Stripe), and AI Model Providers (e.g., OpenAI, Anthropic) who assist in generating forecasts.

Note: Our contracts with AI providers strictly prohibit them from using your data to train their foundation models.

Legal Requirements: If required by a subpoena, court order, or valid law enforcement request.

INTERNATIONAL DATA TRANSFERS

Roco Finance is based in the United States (Delaware). If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US. We rely on standard contractual clauses or adequacy decisions where applicable for cross-border transfers.

YOUR RIGHTS (DELAWARE & CALIFORNIA RESIDENTS)

Under the Delaware Personal Data Privacy Act (DPDPA) and CCPA, you have specific rights regarding your data:

Right to Know/Access: You can request a copy of the specific pieces of personal data we have collected about you.
Right to Delete: You can request that we delete your personal data (subject to our legal retention obligations).
Right to Correct: You can request that we correct inaccurate data.
Right to Opt-Out of Profiling: You have the right to opt-out of "profiling" in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.

How to Exercise: To opt-out of AI profiling, email legal@rocofinance.ai. Note that opting out may severely limit the functionality of the "AI Agent" forecasting features.

Right to Non-Discrimination: We will not charge you higher prices or deny services for exercising your privacy rights.

Legal Commentary (DOPPA Compliance): The DPDPA (effective 2025) specifically mandates the "Right to Opt-Out of Profiling". This is crucial for an AI app. Since Roco's core value is AI forecasting (which is profiling), the policy must explain that opting out essentially breaks the app, but the right must still be offered legally.

DO NOT TRACK SIGNALS

Delaware law requires us to state how we respond to "Do Not Track" (DNT) signals. Our Service does not currently respond to DNT signals from web browsers.

DATA SECURITY

We implement industry-standard security measures (encryption at rest and in transit) to protect your QBO data. However, no security system is impenetrable. In the event of a data breach, we will notify you and applicable regulators as required by Delaware and federal law.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice in the Service.

Roco Finance AI, Inc.

8 The Green, Ste A, Dover, DE 19901

Email: legal@rocofinance.ai