Privacy Policy

1. Introduction

SuperCala LLC ("SuperCala," "we," "us," or "our") provides a family of software products for small businesses and consumers, including AI-powered receptionist, scheduling, and marketing tools; personal net-worth tracking applications; and tax and bookkeeping software. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with any of our services, including phone calls, SMS messages, web chat, linked financial accounts, and our websites.

This Privacy Policy applies to all current and future software products, websites, and services offered by SuperCala LLC, unless a specific product provides its own distinct policy. As we expand our suite of tools, your data will continue to be protected according to the principles described herein across our entire ecosystem.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information: name, phone number, email address
• Call data: call recordings, transcripts, and metadata (duration, timestamps)
• Chat logs: messages exchanged through our web chat widget
• Scheduling data: appointment details, calendar availability
• Device and usage data: IP address, browser type, pages visited
• SMS data: mobile phone number, message content, opt-in/opt-out status
• Financial account information: account balances, account names and types, institution names, investment holdings (tickers, shares, prices, cost basis), liabilities and loan details (interest rates, payment amounts, balances), and transactions (dates, amounts, descriptions, merchant names). We receive this information only when you choose to link a financial account through Plaid (see Section 5).
• Property information: property addresses you add, along with automated valuations we retrieve from RentCast on your behalf.
• Tax and income documents: W-2s, 1099s, and other tax documents you upload or import.
• Account and billing: email address, hashed password, two-factor authentication status, and Stripe customer/subscription identifiers for paid plans.

3. How We Use Your Information

We use the information we collect to:

• Operate our AI receptionist and respond to your inquiries
• Schedule and manage appointments on your behalf
• Send SMS notifications including appointment reminders, confirmations, and follow-ups
• Send service-related SMS updates (with your consent)
• Compute and display your net worth, holdings, and spending trends inside our financial applications
• Categorize transactions for tax and bookkeeping purposes
• Answer your questions about your own data through the in-app AI assistant
• Authenticate you, process subscription payments, and operate your account
• Improve our services. We do not train machine-learning models on financial data received from Plaid, tax documents, or any other personally identifying user content.
• Comply with legal obligations

4. SMS and Mobile Information

When you opt in to receive SMS messages from SuperCala or our business clients, we collect your mobile phone number and consent preferences. We do not share, sell, or provide your mobile information (including phone numbers and opt-in data) to third parties or affiliates for marketing or promotional purposes. Mobile information is used solely to deliver the SMS messages you have consented to receive.

For full details on our SMS program, including opt-in methods, message frequency, and how to opt out, please see our SMS Terms.

5. Financial Account Information via Plaid

Our financial products (currently MyNetWorth and LedgerPilot) let you link financial accounts (banks, credit cards, brokerages, loan servicers) using Plaid Inc. ("Plaid") as our data provider. When you use Plaid Link to connect an account, you authorize Plaid to share information about that account with SuperCala. Plaid's collection, use, and retention of your information is governed by Plaid's End User Privacy Policy, which we incorporate by reference.

The categories of financial information we receive from Plaid depend on the product and accounts you link, and may include: account identifiers assigned by Plaid, account names and types, balances, investment holdings, liabilities, and transactions. We use this information only to:

• Display your net worth, holdings, and spending to you inside the application you linked the account from
• Categorize transactions for tax and bookkeeping purposes
• Compute historical snapshots so you can see trends over time
• Answer your questions about your own financial picture through the in-app AI assistant, which processes data on a transactional basis with our AI sub-processors (see Section 6)

We do not sell your financial information, use it for advertising, or share it with data brokers. Plaid access tokens and the financial data we receive from Plaid are encrypted at rest using authenticated encryption (AES with HMAC) and transmitted only over TLS 1.2 or higher. You can disconnect any linked account at any time from within the application; doing so removes our stored access token and stops further data retrieval. You can also request deletion of all financial data we hold about you by emailing privacy@supercala.ai.

6. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers (receptionist/marketing): Twilio (voice/SMS delivery), Google (calendar integration), Nylas and SendGrid (email delivery).
• Service providers (Financial Products): Plaid (financial account connectivity), RentCast (property valuations), Stripe (payment processing and subscriptions), Railway (cloud hosting).
• AI sub-processors: OpenAI and Anthropic process conversation content and the minimum financial context necessary to answer your in-app questions. We do not permit these providers to train models on your data.
• Business clients: if you are an end customer who contacted a SuperCala business client through our receptionist platform, that business receives your interaction data.
• Legal requirements: when required by law, regulation, or legal process.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy.

• Call recordings, chat logs, SMS history: up to 12 months unless a longer period is required by law or requested by our business clients.
• Financial data from Plaid: retained while the account remains linked and your SuperCala account is active. When you disconnect an account, the associated Plaid access token is revoked and all derived financial data (balances, holdings, transactions) is deleted immediately in the same transaction that removes the account link. If you delete your SuperCala account, all Plaid data we hold about you is deleted within seven (7) days, except where retention is required for tax-record or legal reasons.
• Tax documents: retained for the duration you request, up to seven years (the IRS record-retention window), then deleted.

You may request earlier deletion at any time by emailing privacy@supercala.ai.

8. Data Security

We implement industry-standard security measures to protect your information, including TLS 1.2+ for data in transit and authenticated encryption (AES with HMAC) for Plaid access tokens and financial data at rest. Administrative access is protected by password authentication plus optional TOTP two-factor authentication. Additional detail is available in our security policy. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you, including financial data imported from linked accounts
• Request correction of inaccurate information
• Request deletion of your personal information and all data imported from Plaid
• Disconnect any linked financial account at any time from within the app
• Opt out of SMS communications at any time by replying STOP
• Withdraw consent for data processing

To exercise any of these rights, please contact us at privacy@supercala.ai or support@supercala.ai.

10. Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

11. Policy Review & Changes

This Privacy Policy is reviewed at least annually, and whenever our products, data flows, service providers, or applicable privacy laws change materially. Reviews confirm that our stated retention windows, categories of collected data, and vendor list match our implementation; the review outcome is logged internally.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date at the top.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

SuperCala LLC
2006 Napa Valley Dr, Waxhaw, NC 28173
Privacy inquiries: privacy@supercala.ai
General support: support@supercala.ai
Website: www.supercala.ai