Wurthy, Inc. — Privacy Policy

Wurthy, Inc. ("Wurthy," "we") provides an AI-enabled platform that accounting firms and businesses ("Customers") use to deliver bookkeeping and advisory services. This Policy explains how we collect, use, share, and retain personal information. It covers: (a) visitors to our website; (b) Customer personnel who use the platform; and (c) information about Customers' business clients ("Client Data") processed through the platform.

We use information to:

• provide, secure, and support the Services
• set up and administer accounts, plans, Commitments, and billing
• deliver implementations and professional services
• generate analyses, workflows, and AI-assisted outputs for our Customers
• communicate about the Services (service messages, and marketing you can opt out of)
• improve and develop the Services, including creating de-identified, aggregated data and improving our models — where model improvement would use Client Data, we do so only as permitted by our Customer agreements
• comply with law
• protect rights, safety, and security

We share information with:

• Sub-processors and service providers that host and support the Services (cloud infrastructure, AI model providers, payment processing, analytics, communications, support tooling), bound by contractual confidentiality and use limitations. A list of our sub-processors is available upon request at privacy@wurthy.co.
• At the Customer's direction — e.g., integrations the Customer connects.
• Professional advisors, and legal/safety recipients where required by law, subpoena, or to protect rights and safety, with notice to the Customer where legally permitted.
• Corporate transactions — a successor in a merger, acquisition, financing, or sale of assets, under this Policy's protections.

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes:

Account data

for the life of the account plus up to seven (7) years for financial/audit records

Client Data

per our Customer agreements (export window of 30 days post-termination, then deletion subject to legal holds and backup cycles)

Usage logs

typically 24 months

De-identified data

may be retained without limit

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls and least-privilege permissions, logging and monitoring, and vendor due diligence. No system is perfectly secure; we will notify Customers of a breach affecting their data as required by law and our agreements.

Depending on your state (including under the California Consumer Privacy Act as amended, and the Colorado, Connecticut, Virginia, Utah, Texas, and other state privacy laws), you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of targeted advertising, sale, or certain profiling. We do not sell personal information or process it for targeted advertising.

To exercise rights, email privacy@wurthy.co; we will verify your request and respond within the time required by law. You may appeal a denial by replying to our decision. We do not discriminate for exercising rights. Authorized agents may submit requests with proof of authorization.

If your information was provided to us by your accounting firm as Client Data, we will refer your request to that firm and support their response, as the law provides for processors.

We use:

Essential cookies

authentication, security

Functional cookies

preferences

Analytics cookies

usage measurement

You can control cookies through your browser and, where required, our cookie banner. We honor Global Privacy Control signals where legally required.

We will post updates to this Policy with a new effective date and, for material changes, provide notice.