Privacy policy

1. Who is responsible

Durity, Inc. ("Durity", "we") runs this website and the Durity app, and decides how the information described here is used. To reach us about privacy, send us a message.

2. What we collect

When you use the app

• Your account: name, email address and sign-in details.
• Your company: its name, type, state and tax details, and its owners (names, countries and ownership shares).
• Your books: bank and card transactions you import or connect, invoices, receipts, statements and other documents you upload.
• Contractors: the people and businesses your company pays, including the details they give on a W-9. Their taxpayer ID numbers are encrypted with a separate key, and only the last four digits are shown afterwards.
• Messages and answers: what you and your accountant write to each other, and your answers to questions about transactions.
• Activity records: a log of important actions (sign-ins, approvals, changes to filings and access), kept for security and to show who did what.

When you pay

Card payments are handled by our payment provider. We receive the result of each payment. We do not receive or store your full card number.

When you visit this website

The website sets no cookies and does not store your IP address. It counts visits without identifying you; the cookie policy explains exactly how. If you use the contact form we keep your name, email address and message so we can answer, and briefly use a shortened form of your network address to limit abuse of the form. If you ask for our emails (deadline alerts, the newsletter, webinar invitations or offers) we keep your email address, the kinds of email you chose and, if you tell us, the type of company you have. We send one email asking you to confirm, and nothing else until you do. We briefly use a shortened form of your network address to limit abuse of the sign-up form.

3. How we use it

• To keep your books, prepare your tax returns and filings, and send them to the tax authorities once you approve them.
• To run your account: signing you in, billing, and emails about deadlines, questions, approvals and payments.
• To send the emails you asked for. Each one has a link to change which emails you get or to stop all of them. Stopping them does not affect emails about your own account and filings.
• To keep the service secure and to fix problems.
• To meet legal duties that apply to people who prepare tax returns.

We do not sell your information, and we do not use it for advertising.

4. AI assistance

AI assistance is off unless an owner turns it on for the company. When it is on, transaction descriptions and amounts, and the questions you ask about your books, are sent to our AI provider to suggest categories and write answers. A receipt you upload is sent to the AI provider only when someone on your team presses "Read it for me" on that receipt. It is sent as it is, so anything printed on it (which can include a name or the last digits of a card) is included. When it is off, none of your company's data is sent to an AI provider.

5. Who we share it with

• The people at Durity who work on your company. Access is limited to the accountants assigned to it and the Durity administrators who run the service, and it is logged.
• Tax authorities, such as the IRS and state agencies, when we file what you have approved.
• Companies that run parts of the service for us, under contract and only for that purpose: Supabase (database, file storage and sign-in), Vercel (hosting), Resend (email), our payment provider (card payments) and, only if AI assistance is on, Anthropic (AI).
• Services you choose to connect, to the extent needed to read your data from them.
• Others when the law requires it, or in a sale or merger of the business, in which case this policy continues to apply to your information.

6. Where it is kept

Your records are stored in the United States. If you live elsewhere, your information is transferred to and processed in the United States. Data travelling between your browser and Durity is encrypted (TLS).

7. How long we keep it

• While you have an account, we keep your records so we can do the work.
• If you ask us to delete your account, we first email you a full export. After a 30-day waiting period the company, its files and the sign-in are deleted.
• One exception: U.S. law requires a paid tax return preparer to keep a copy of each return it prepared for three years after the close of the return period. Returns we filed for you are kept privately for that time and then deleted.
• If you unsubscribe from our emails, we keep your email address on a do-not-send record so that we do not email you again by mistake.

8. Your choices

• See and take your data: export everything from the app at any time.
• Correct it: change your details in Settings, or ask your accountant.
• Delete it: ask for account deletion in the app, subject to the exception above.
• Turn AI assistance on or off in Settings.
• Stop newsletters, invitations and offers: use the link at the bottom of any of those emails, or the "Unsubscribe" button your mail app shows. If you are a customer you can also choose them in Settings.

Depending on where you live, the law may give you further rights over your personal information. Contact us and we will respond.

9. Children

Durity is for businesses. It is not meant for anyone under 18, and we do not knowingly collect information from children.

10. Changes to this policy

If we change this policy we publish the new version here with a new date, and tell you in the app or by email if the change is significant.