← Back to the app

Privacy Policy

Last updated November 5, 2026

This policy explains what information Small-Biz Moni (the “app”), operated by Harvest Clicks (“we”), collects, how it is used, who it is shared with, and the choices you have. By using the app you agree to it.

1. Information we collect

  • Account information: your name, email address, optional phone number, and a hashed (not readable) password. If you turn on two-factor sign-in, we store what is needed to run it. If you add a passkey, we store its public key and a name you give it (never your fingerprint, face or device PIN, which stay on your device).
  • Business information you enter: customers and contacts, invoices and estimates, services, projects, time entries, notes and tags.
  • Bank information, only if you connect a bank: through Plaid we receive the names of the accounts you choose, the last four digits of each, balances, and transactions (date, amount, payee and category). We do not receive or store your bank username or password, or full account numbers. Your bank access token is stored encrypted.
  • Assistant chats: messages you send to the built-in assistant (“Ask Llama”) and its replies are saved so you can find them again.
  • Technical information: sign-in session cookies that keep you logged in, and standard server logs (such as time and page requested) used to run and secure the app.

2. How we use it

Only to provide the app: showing and managing your invoices, customers, time and expenses; sending the emails you ask it to send; taking payments you set up; calculating spending, budgets and business-expense totals from your bank transactions; keeping your account secure; and fixing problems. We do not sell your personal information, and we do not use it for advertising or share it for advertising.

3. Connecting a bank (your consent)

Connecting a bank is optional and requires your separate, explicit agreement before it starts. The connection is made by Plaid, Inc. in Plaid's own window. Plaid's handling of your information is described in its End User Privacy Policy. You can disconnect a bank at any time in the app (Track Expenses → Overview → Connected banks). Disconnecting ends our access through Plaid and deletes that bank's imported accounts and transactions from the app. You can also manage or revoke access from your bank or through Plaid.

4. Who we share information with

We use these service providers to run the app, and they only receive what they need for that purpose:

  • Plaid — bank connections and transaction data (only if you connect a bank).
  • Stripe — payment processing for invoices that are paid online.
  • Brevo — sending emails such as invoices, receipts, reminders and invitations.
  • Vercel and Neon — hosting the app and storing its database.
  • The assistant host — the assistant runs on a model hosted by us; your questions are not sent to a third-party AI provider.

We may also disclose information if the law requires it, or to protect the safety and security of the app and its users.

5. How long we keep it

We keep your information while your account is active. Imported bank data is deleted when you disconnect the bank. Invoice and payment records may be kept as long as needed for accounting, tax and legal reasons. You can ask us to delete your account and personal information (see “Your choices”); backups are overwritten on their normal schedule.

6. How we protect it

Data is sent over encrypted connections (HTTPS). Bank access tokens are stored encrypted, passwords are stored hashed, each account's data is kept separate from other accounts, and two-factor sign-in is available. No system is perfectly secure, so we cannot guarantee absolute security.

7. Your choices

You can ask to see, correct or delete the personal information we hold about you, and you can withdraw a consent you gave (for example, by disconnecting your bank, or by asking us to close your account). Contact the business owner (the person who invited you). Depending on where you live you may have additional rights under local privacy law, and we will honor them.

8. Children

The app is for business use by adults and is not directed to anyone under 18.

9. Changes to this policy

If we change this policy in a way that matters, we will update the date above and ask you to review and accept it again before you continue using the app.

10. Contact

Questions or requests about your information: the business owner (the person who invited you).