1. About This Policy
Numerant, Inc. (“Numerant,” “we,” “us,” or “our”) provides an AI-assisted software platform for financial intelligence (the “Service”). Transaction advisory teams, accounting firms, and other financial professionals use the Service for work such as quality of earnings analysis. This Privacy Policy explains how we collect, use, share, store, and protect personal information when you visit numerant.ai, request a demo, communicate with us, or use the Service, and the choices and rights available to you.
The Service is offered to businesses, not consumers. Our customers’ use of the Service is also governed by their agreement with us, including our Terms of Use, Order Form, and, where applicable, a data processing agreement or business associate agreement. If this Privacy Policy conflicts with a signed agreement regarding Customer Data, the signed agreement controls.
2. Our Two Roles
Information we control. For website visitors, people who request a demo or contact us, and the business contact and account details of our customers’ users, Numerant decides how the information is used. This Privacy Policy describes those practices.
Customer Data we process for our customers. When a customer uploads financial records and other materials to the Service, or the Service generates reports from them (together, “Customer Data”), we process that information on the customer’s behalf and only as our agreement with that customer allows. Customer Data may include personal information about people other than our users, such as owners, employees, customers, or vendors named in a company’s books and records. The customer is responsible for providing any notices and obtaining any permissions required for that information. If you have questions about how a customer uses Customer Data, please contact that customer (for example, the firm performing the analysis). You may also make the privacy requests described in Section 8 directly to us.
3. Information We Collect
3.1 Information you give us
- Demo requests: your full name, work email, company, type of team, and anything you choose to tell us in the notes field.
- Communications: information you provide when you email, call, meet with, or request support from us, such as your name, contact details, and the content of your messages. With your knowledge, we may take notes of meetings, including with note-taking software.
- Account information: for users of the Service, your name, work email, organization, role and permissions, and sign-in settings such as single sign-on or multi-factor authentication preferences.
- Contract and billing information: the names, titles, and business contact details of people who sign or administer our agreements, and related invoicing records.
3.2 Customer Data
Financial and business records that customers upload to the Service, such as trial balances, general ledgers, financial statements, payroll records, and bank information, and the analyses and reports the Service produces from them. Personal information may appear within these records. We handle Customer Data as described in Sections 2 and 4.
3.3 Information collected automatically
- Website: numerant.ai uses Vercel Web Analytics, a privacy-focused tool from our hosting provider, to count visits and see which pages people view. It records the page you view, the site that sent you, your browser and operating system, your device type, and your approximate location (country, region, and city). It does not use cookies or track you across other websites, and it counts visits with a temporary identifier that is discarded within 24 hours. numerant.ai does not use advertising or social media tracking tools and does not set cookies. Like most websites, our hosting provider receives standard technical information when you load a page, such as your IP address, browser and device type, the page requested, and the time of the request, so that it can deliver the site and protect it from abuse.
- Service: we log technical and usage information about how the Service operates and is used, such as IP address, browser type, identifiers, timestamps, and error information, and we keep a record of actions taken in each account. We use this information for security, troubleshooting, accountability, and to improve the Service (“Usage Data”).
3.4 Cookies and similar technologies
The Service uses only the cookies and browser storage needed to sign you in, keep your session secure, and remember your preferences. It does not load third-party scripts, use advertising cookies, or track you across other websites, so we do not respond differently to “Do Not Track” browser signals. If we add analytics or other non-essential cookies in the future, we will update this Privacy Policy before doing so.
3.5 Information from other sources
We may receive business contact information from referrals, partners, events, and public professional sources such as company websites and LinkedIn.
4. How We Use Information
We use the information we control to:
- Provide, operate, maintain, and support the Service, including the AI features our customers ask it to perform;
- Respond to demo requests and inquiries, schedule meetings, and communicate with you about the Service, including onboarding, product updates, and security notices;
- Send occasional business communications about Numerant, which you can opt out of at any time;
- Authenticate users, enforce access controls, and detect, investigate, and prevent security incidents, fraud, and abuse;
- Understand and improve the Service using Usage Data and feedback; and
- Administer our agreements, billing, and records, comply with legal obligations, and enforce our rights.
Customer Data is used only to provide, secure, support, and maintain the Service for the customer that submitted it (including troubleshooting at the customer’s request), to prevent or address security, fraud, or technical issues, to comply with law, and as the customer’s agreement otherwise permits. If a customer opts in to product improvement in its Order Form, we may use Customer Data that has been de-identified to improve our products.
4.1 AI features and model training
We do not use Customer Data to train AI models, ours or anyone else’s. The Service’s AI features run through Amazon Bedrock, called from within each customer’s dedicated AWS account. Prompts and responses are processed to return results; they are not stored by Amazon Bedrock and are not shared with the developer of the underlying model.
5. How We Share Information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:
- Service providers and subprocessors that help us run the Service and our business, such as cloud hosting and AI model providers, network security, email and productivity, website hosting, communication and meeting-notes, software-development, project-tracking, and compliance tools. They may use personal information only to provide services to us and are bound by confidentiality and security obligations. The current list of subprocessors for Customer Data is available in our Trust Center.
- Within a customer’s account: a customer’s administrators can see the account information and activity of the users in their organization.
- At your direction or with your consent.
- Professional advisers and auditors, such as lawyers, accountants, and security and compliance auditors, who are bound by confidentiality obligations.
- Legal and safety reasons: to comply with law or legal process, respond to lawful requests from public authorities, and protect the rights, property, and safety of Numerant, our customers, or others.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to the commitments in this Privacy Policy.
- Aggregated or de-identified information that cannot reasonably be used to identify you or a customer.
6. Where We Store Information
Numerant is based in the United States, and we store and process information, including Customer Data, in the United States.
The Service is intended for organizations in the United States. Before submitting personal data governed by the EU or UK General Data Protection Regulation, a customer must enter into a data processing agreement with us.
7. How Long We Keep Information
- Customer Data: kept for the term of the customer’s agreement. We delete it within 90 days after the agreement (or business associate agreement) ends, or within 30 days after we verify a deletion request. Remaining copies in our encrypted backups are removed on a short, fixed schedule.
- Account information: kept while the account is active and deleted with the customer’s data when its agreement ends.
- Logs: kept for a limited period for security and troubleshooting, then deleted.
- Demo requests, sales, and communications: kept for as long as they are useful to our relationship with you or your organization. You can ask us to delete them at any time.
- Support records: we keep a basic record of each support request (who asked, when, a summary, and how it was resolved). Any Customer Data in a support request is removed on the Customer Data timelines above.
We may keep information longer where required by law, under a legal hold, or to resolve disputes and enforce our agreements.
8. Your Rights and Choices
You may ask us to confirm whether we hold personal information about you, give you access to or a copy of it, correct it, or delete it. You may also opt out of our business communications at any time. Depending on where you live, you may have additional rights under applicable law.
To make a request, email hello@numerant.ai. We will verify your identity before acting, usually by confirming the request from the email address associated with your information; if someone is acting on your behalf, we will ask for proof of their authority. We will respond within 30 days after we verify your request. If we cannot fully complete a request, for example because the law requires us to keep certain information, we will explain why. We will not treat you differently for exercising your rights.
If your information is part of Customer Data, you may make these requests directly to us at hello@numerant.ai, and we will handle them as described above. Requests involving protected health information are forwarded to the relevant customer, and we act on them only as that customer directs.
To stop receiving business communications from us, reply to any message asking us to stop, or email hello@numerant.ai. We may still send you service and security messages related to your account.
9. How We Protect Information
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, strong authentication, and least-privilege access controls.
No method of transmission or storage is completely secure. If we confirm a security incident affecting Customer Data, we will notify affected customers without undue delay, as described in our agreements. More detail is available on numerant.ai/security and in our Trust Center.
10. Health Information
The Service is not intended for protected health information (“PHI”) regulated by the Health Insurance Portability and Accountability Act (HIPAA) unless we have signed a business associate agreement (“BAA”) with the customer. Where a BAA is in place, we handle PHI as a business associate (or subcontractor) under that BAA, which controls over this Privacy Policy. Individuals with questions about their health information should contact the organization that holds it. This Privacy Policy is not a HIPAA Notice of Privacy Practices.
11. Children
The Service is intended for business use by adults. It is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Changes to This Privacy Policy
We review this Privacy Policy at least once a year and whenever our data practices change. When we update it, we will post the revised version on this page and change the “Last updated” date. If we make material changes, we will notify customers by email or through the Service before the changes take effect.
13. Contact Us
Questions, requests, or concerns about this Privacy Policy or our data practices can be sent to:
Numerant, Inc.
Attn: Privacy Officer
hello@numerant.ai
Security questions: security@numerant.ai