Privacy policy

This page says what Granary collects, where it's kept and who else handles it. The first part covers the site as it is today. The second covers the app, which isn't open yet, and says what it will do when it opens.

Who we are

Granary will be run by Granary LLC, which hasn't been formed yet. This policy will name it, and give a way to reach us, once it is.

What the site collects today

• The site's one form is the invite request. It keeps your email address, when you asked and, if you choose them, two answers: your company's tax form and the books software you use. Nothing else you type into the form is stored.
• To keep the form from being flooded, we count requests from each network address, one minute at a time. We don't store the address in our database. We store a code made from it with a secret key, and delete the counts from earlier minutes as new requests come in.
• When something fails on our side, we log a request number, the address of the page or form, the kind of error and where in our code it happened. That log holds no email address or answers from the form.
• The site sets no cookies.
• The site's fonts are served from the site itself, so opening a page doesn't contact a font service.

We haven't yet set how long we keep the invite list. This section will say once we have.

Where it's kept

The site and its server run on Vercel. The invite list is stored in a Postgres database run by Neon. Vercel keeps its own logs of requests to the site, with details such as the page, the time and your browser, and its tools can match requests to a network address.

When you connect accounts

Once the app opens, this is how it will handle your company's data.

• You'll be able to connect accounts such as your bank, payroll and payments, or upload the exports those services let you download.
• Granary will ask each service for permission to read only. It won't be able to move money or change anything in your accounts.
• When you connect a service by signing in to it, you'll see Granary's name when you approve. Granary will keep the access it's given encrypted, and no other platform will hold it.
• Each company's data will be kept apart from every other company's (see the security page).
• When an account closes, we'll delete the data imported for it 30 days later.

When Joseph answers a question

Joseph, Granary's assistant, uses Anthropic's Claude models to read questions and word answers. The figures themselves are worked out by code from your records. Once you've connected accounts, each answer will send Anthropic your question, what Granary found in your records for it (such as payee names) and the law it relies on. Anthropic handles that under its Commercial Terms of Service, which say: "Anthropic may not train models on Customer Content from Services."

Granary is not a CPA firm, and Joseph's answers are not advice from a licensed tax professional.