Privacy Policy

This Privacy Policy explains how WEBIT Services, Inc., an Illinois corporation ("WEBIT Services," "PennyCFO," "we," "us"), collects, uses, and protects information in connection with the PennyCFO virtual CFO platform (the "Service"). It should be read together with our Terms of Service and our Responsible AI & Privacy page, which describes specifically how our AI feature, Penny, handles your data.

• Account information: name, business email, company name, and password (hashed, never stored in plain text).
• Financial data: financial statements you upload, and data synced from connected accounting platforms such as QuickBooks Online (chart of accounts, transactions, balances, and reports).
• Usage data: pages visited, features used, and chat messages sent to Penny, for the purpose of operating and improving the Service.
• Technical data: IP address, browser type, and device information, collected automatically for security and diagnostic purposes.

• To provide, operate, and maintain the Service, including dashboards and forecasts;
• To generate AI-driven insights through Penny, our advisory chat feature;
• To authenticate your account and secure access to your data;
• To communicate with you about your account, updates, or support requests;
• To monitor, detect, and prevent fraud, abuse, or security incidents; and
• To comply with legal obligations.

When Penny generates an insight or answers a question, it sends only the financial data necessary to respond — such as revenue and expense figures, forecast targets, and your question — to our AI model provider. We do not send your company name, address, phone number, employee names, EIN, or other identifying or government information to the AI model.

We do not use your data to train third-party AI models, and our AI provider is contractually restricted from doing so with data submitted through our Service. See our Responsible AI & Privacy page for a full breakdown of what is and is not shared with AI.

We share information with third-party service providers who help us operate the Service, under contractual confidentiality and data-protection obligations, including:

• Intuit / QuickBooks Online — to sync financial data you authorize us to access via OAuth;
• Our AI model provider — to generate Penny's insights, using only the de-identified data described above;
• Cloud infrastructure and storage providers — to host the Service and store your data securely; and
• Payment processors — to process subscription billing.

We do not sell your personal information or Customer Data to any third party.

We use industry-standard safeguards to protect your information, including encryption of data in transit and at rest, access controls scoped to your company (multi-tenant data isolation), and audit logging of security-relevant events. No system is completely secure, and we cannot guarantee absolute security, but we continuously work to protect your data as part of our commitment to SOC 2-aligned practices.

We retain your data for as long as your account is active, or as needed to provide the Service. If you disconnect a third-party integration (such as QuickBooks Online), we stop syncing new data immediately; you can choose whether to delete previously synced data at the time of disconnection.

If you close your account, we will delete or anonymize your personal information and Customer Data within a commercially reasonable period, except where we are required to retain it to comply with law, resolve disputes, or enforce our agreements.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to certain uses of it. To exercise these rights, contact us at privacy@pennycfo.ai. We will respond in accordance with applicable law.

We use cookies and similar technologies necessary to keep you signed in and to remember your preferences. We do not use third-party advertising cookies.

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

Questions about this Privacy Policy or how we handle your data? Email us at privacy@pennycfo.ai.