Privacy Policy

KAM — The Virtual CFO (“KAM,” “we,” “us”) is published by TearTech. This policy explains what we collect through kam.teartech.com and the KAM application, how we use it, and the choices you have. It is posted conspicuously in the footer of every page as required by the California Online Privacy Protection Act (CalOPPA).

What we collect

Account information: your email address and a password (stored only as a secure hash by our authentication provider). Business profile: the intake details you provide — legal name, entity type, accounting basis, state, industry, and payroll provider. Financial files and results: the trial-balance and general-ledger files you upload, and the findings, proposed entries, and metrics KAM derives from them. Forms: if you request the sample report or early access, the name and email you submit. Product records: audit events such as sign-ins, uploads, and analysis runs.

What we deliberately do not collect

No bank usernames, passwords, or banking credentials — ever. No payment-card data (billing is not live during the pilot). No advertising identifiers, no cross-site tracking pixels, and no third-party analytics cookies at this time. The only browser storage we use is the session token that keeps you signed in.

How we use information

To provide the service: authenticate you, store your files privately, run the financial diagnostic, and show you the results. To operate responsibly: security logging, abuse prevention, and support. To communicate: transactional messages about your account and, if you opted in via a form, pilot updates (every marketing email includes an unsubscribe, per the federal CAN-SPAM Act). We do not use your financial data for advertising.

AI and automated processing

KAM's current pilot analysis is deterministic software; your uploaded financial data is not sent to third-party AI model providers. If future features (such as Ask KAM) change that, this policy will be updated first, and any provider will be configured not to train on your data.

We do not sell or share personal information

We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA. Because we do not track you across sites, browser “Do Not Track” and Global Privacy Control signals do not change how the site behaves — there is no tracking to turn off.

Service providers

Your data is processed by a small set of infrastructure providers acting on our instructions: Supabase (authentication, database, and private file storage; hosted on AWS in the United States, us-east-1), Netlify (website hosting and form submissions), and Google Fonts (typeface delivery, which transmits your IP address to Google when fonts load). We do not authorize any provider to use your data for its own purposes.

Security and retention

Files are encrypted in transit and at rest, stored in private buckets isolated to your organization, and protected by database row-level security. See the Security page for details. We retain your data while your account is active. When you delete your account or ask us to, we delete your data from production systems promptly; residual copies in encrypted backups age out on our providers' backup cycles.

Your rights

You may request access to, correction of, or deletion of your personal information, and you will never be discriminated against for exercising these rights. California residents may exercise CCPA/CPRA rights (know, delete, correct) by emailing privacy@teartech.com from the email on your account; we will verify and respond within the statutory period.

Children

KAM is a business tool. It is not directed at children, and we do not knowingly collect personal information from anyone under 16.

Changes and contact

If this policy changes, we will update the effective date at the top of this page — and, for material changes affecting account holders, notify you by email. Questions: privacy@teartech.com.