Privacy Policy
Last updated: August 2026
1. Information We Collect
Account information (such as your email), the transaction data you upload to perform reconciliation, and basic usage logs (such as login times and feature usage).
2. How We Use Your Data
Uploaded transaction data is used for that reconciliation run. Once complete, if you use the History or Transfer Match History features, we retain the match results (reconciliation breaks, unresolved and unmatched items, activity logs) for later audit and export, with retention periods based on your plan (see Section 5). AI Memory only stores the name-mapping rules you define — it never stores any transaction content. Your reconciliation and transfer-match history is accessible only to you (the product is currently single-account only, with no team sharing yet), and we never use your data for any other purpose.
3. AI & Third-Party Services
Matching and drafting run through the Claude API. Under Anthropic's commercial terms, data sent via the API is never used to train models. Subscription and overage payments are processed by Dodo Payments — Dodo is the Merchant of Record, handling actual payment collection, tax, and invoicing. Your payment information (card number, etc.) is collected and held by Dodo; Hemly's own systems never touch, transmit, or store your card number or payment details. We only learn whether your subscription is active through Dodo's subscription-status webhook, matched back to your account by email.
4. Data Security
All data is transmitted over HTTPS and encrypted at rest. Only the system operator can access production data, under a least-privilege principle.
5. Data Retention & Deletion
Reconciliation and transfer-match history are each retained per your plan, on the same schedule: 30 days on Free Trial, 1 year on Starter, 5 years on Pro Growth (including Founding Members), 7 years on Scale — retention is unaffected by monthly vs. annual billing. We email a reminder 3 days before expiry so you can export an Excel backup or upgrade to extend retention; records are automatically and permanently deleted once the retention period ends. You can also delete all reconciliation history or all transfer-match history with one click from your account page anytime, or request deletion of your account and all related data — we'll complete deletion within a reasonable time.
6. Your Rights
You may access or correct your account information at any time, or request deletion of your account and related data. For assistance, please contact us using the information below.
7. Policy Updates
This policy may be updated as our service evolves. Material changes will be announced on this page, with the date above updated accordingly.
8. Contact Us
If you have any questions about this policy, please email support@hemlyai.com.