Back to Pineapple Analyst

Privacy Policy

Pineapple Analyst AI LLC · Last updated: September 18, 2026

1. Introduction

Pineapple Analyst AI LLC ("Pineapple Analyst," "we," "us," or "our") operates a business-intelligence and financial-analytics platform (the "Service") that connects to the business data sources you authorize, organizes that data, and generates dashboards, insights, and forecasts. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

We act in two capacities. For the personal information relating to your account, profile, and use of the Service, we are the "controller" and this Policy governs how we handle it. For the financial and business data you connect from the sources you authorize, we act as a "processor" (or service provider) that handles that data on your behalf and under your instructions to provide the Service to you.

The Service is offered by a United States company and is intended for business users located in the United States. It is not directed to individuals in the European Union, the United Kingdom, or other regions with separate data-protection regimes.

2. Information We Collect

We collect the following categories of information:

  • Account and profile information — your name, email address, and, if you provide them, profile photo, time zone, and display preferences.
  • Authentication information — credentials used to sign in. You may sign in with Google or with an email address and password. Passwords are managed by our authentication provider and are never stored in readable form by us.
  • Connected financial and business data — when you connect a data source, we access and store the data you authorize, which may include financial statements, transactions, and other business records from the systems you connect. This data may itself contain the names of your customers, vendors, or other third parties.
  • Content you create — dashboards, saved analyses, AI-assistant conversations, generated insights and forecasts, and images such as logos you upload.
  • Usage and log information — records of your interactions with the Service, sign-in history, session and device/browser information, and diagnostic logs used to operate and secure the platform.

We do not use third-party advertising or analytics trackers, and we do not set marketing or advertising cookies. The only cookies we use are those strictly necessary to keep you signed in.

3. Where Your Information Comes From

  • Directly from you, when you create an account, configure the Service, or contact us.
  • From the data sources you connect, which we access only with your authorization and only to the extent needed to provide the Service.
  • Automatically, through your use of the Service (usage, log, session, and device information).
  • From a consulting firm that uses the Service, with respect to the client accounts and data it manages on the platform.

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service;
  • Synchronize and process your connected financial data to build dashboards, insights, and forecasts;
  • Authenticate you, manage your account, and enable team and client access you configure;
  • Provide customer support and respond to your requests;
  • Monitor, secure, and troubleshoot the Service, and prevent fraud and abuse; and
  • Comply with legal obligations and enforce our agreements.

We do not use your connected financial data for advertising, and we do not sell it or use it to build products for anyone other than you.

5. How Artificial Intelligence Is Used

Several features of the Service — including the AI Analyst chat, automated monthly insights, dashboard generation, and forecasting — are powered by third-party artificial-intelligence providers (Anthropic, the maker of Claude, and OpenAI, the maker of GPT). To provide these features, relevant information is sent to the provider handling your request for processing, which may include your business name, the structure of your data, summaries or extracts of your financial figures, and the questions you ask.

  • Your data is processed by these AI providers only to provide these features to you, as our service providers and under contract. It is not used to train their artificial-intelligence models.
  • The AI Analyst can perform web searches to answer certain questions. If it does, the search query it composes is sent to the provider's search tool, which reaches the public internet. Do not include information in a chat that you would not want used in a search.
  • AI-generated output is informational and may be incomplete or inaccurate. It is not professional financial, tax, accounting, investment, or legal advice, and it should be reviewed by a qualified person before you rely on it. See our End User License Agreement for the full terms that apply to AI output.

6. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising. We do not use your personal information for profiling that produces legal or similarly significant effects about you. We disclose information only in these limited circumstances:

  • With service providers (sub-processors) who process data on our behalf to operate the Service, listed in Section 7, each bound by contract to protect it and use it only for that purpose;
  • Within your workspace, with the team members, clients, or consulting firm you authorize to access it;
  • For legal reasons, when we reasonably believe disclosure is required to comply with law or legal process, or to protect the rights, safety, or property of Pineapple Analyst, our users, or the public; and
  • In a business transfer, in connection with a merger, acquisition, financing, or sale of assets, with notice to you and continued protection of your information.

7. Service Providers (Sub-processors)

We rely on the following providers to deliver the Service. Each processes data only to provide its part of the platform and is contractually obligated to protect it:

  • Supabase — authentication, application database, and access controls
  • Google Cloud (BigQuery) — storage and processing of your connected financial data
  • Google Cloud Storage — secure archival of raw data retrieved from your sources
  • Anthropic — an artificial-intelligence provider powering AI features (see Section 5)
  • OpenAI — an artificial-intelligence provider powering the dashboard builder when its model is selected (see Section 5)
  • Nango — secure broker that establishes and maintains the authorized connection to your data sources
  • Dataddo — secure broker for certain additional data sources (such as HubSpot) that you may connect
  • Intuit (QuickBooks Online) — a data source you may connect
  • Google (Sheets, Drive, and Sign-In) — a data source and sign-in option you may use
  • Vercel — application hosting and delivery
  • Inngest — background job processing (for example, scheduled data syncs)
  • Resend — delivery of transactional email such as invitations and notices

We may update this list as our providers change. If you would like the current list or notice of changes, contact us at the address in Section 16.

8. How We Store and Protect Your Information

We use technical and organizational measures designed to protect your information, including encryption in transit and at rest, encryption of the access credentials used to connect your data sources, strict per-tenant isolation so that each customer's data is separated from every other customer's, role-based access controls, and validation of uploaded files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we work to protect your information and to address issues promptly if they arise.

9. How Long We Keep Your Information

We keep information for as long as needed to provide the Service and for the purposes described in this Policy, then delete or de-identify it. Specifically:

  • Connected financial data and account content are retained while your account or connection is active and are deleted when you disconnect the source or delete your account.
  • AI Analyst conversations are retained on a rolling basis, with older conversations automatically removed.
  • Operational and diagnostic logs are short-lived and are purged on a routine schedule (generally within 30 days, or up to 90 days for security-related records).
  • Limited records we are required to keep— such as a minimal record needed for legal, tax, audit, or security purposes — may be retained for as long as the applicable obligation requires.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, to opt out of certain processing, and to be free from discrimination for exercising your rights. We extend these rights to all of our users. To learn what your rights are and how to exercise them — including how we verify requests, our response timelines, and how to appeal a decision — see our Your Data Rights page, or contact us at jack@pineappleanalyst.ai.

11. Sale, Sharing, Targeted Advertising, and Opt-Out Signals

We do not sell your personal information, we do not share it for cross-context behavioral or targeted advertising, and we do not use it for profiling that produces legal or similarly significant effects. Because we do not engage in these activities, there is nothing for you to opt out of. We nonetheless recognize the Global Privacy Control (GPC) browser signal, and we disclose — as required by California law — that we treat such opt-out preference signals as valid and do not track you across third-party sites in response to a Do-Not-Track signal.

12. Sensitive Information

Connecting a data source involves sensitive information, including the access credentials and tokens that authorize the connection. We use this sensitive information solely to establish and maintain the connection you requested, to synchronize the data you asked us to analyze, and for security and fraud prevention. We never use it to profile you or for advertising. You may direct us to limit the use of your sensitive personal information, or withdraw your consent to processing it, as described on our Your Data Rights page.

13. Children's Privacy

The Service is intended for businesses and for individuals who are at least 18 years old. It is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, please contact us and we will delete it.

14. Additional Disclosures for Connected Services

Across every source you connect, we request only the access necessary to provide the Service (generally read-only), we use the data you connect only to provide the Service to you, and we do not use it for advertising or to train generalized artificial-intelligence models. You may disconnect any source at any time through the Service, which revokes our access and deletes the associated data, and you may also revoke access directly through the provider's own account settings.

Some of the services you connect require additional disclosures. Our access to and use of information received through the Intuit and Google application programming interfaces adhere to the Intuit Developer terms and the Google API Services User Data Policy, including their Limited Use requirements.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy here, update the "Last updated" date above, and, where appropriate, notify you. Your continued use of the Service after an update takes effect means you accept the revised Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise your rights, contact Pineapple Analyst AI LLC at jack@pineappleanalyst.ai.