1. Information We Collect

We collect business information and personal information in three primary ways: information you provide directly, information collected automatically when you use the Services, and information obtained through integrations you choose to connect.

1.1 Information You Provide Directly

You may choose to provide personal information when you interact with the Services. This may include:

Account and profile information. You may provide information such as your name, email address, password or authentication method, business name, business type, and related profile details when you create or manage an account.

Business information. You may provide information about the business you represent, such as its industry, deal volume, current systems, and other operational details when you request access to or complete onboarding for the Services.

Authentication via third parties. If you choose to sign in using a third-party provider such as Google, we receive information needed to create or maintain your account, such as your name and email address.

Communications. When you contact us for support, feedback, or other inquiries, we collect the information you choose to share in your messages, including contact details and the content of your communications.

1.2 Information Collected Automatically

When you access or use the Services, we automatically collect certain technical and usage information. This may include:

Device and usage information. We collect information such as your IP address, browser type, device type, operating system, referring URLs, pages viewed, time spent on pages, and the date and time of your visits.

Log data. Our systems automatically record information such as access timestamps, authentication events, error logs, and security-relevant events to maintain the integrity and security of the Services.

Analytics information. We use analytics tools (such as Google Analytics) to collect information about how the Services are used so that we can understand usage patterns, evaluate performance, and improve the user experience.

1.3 Information From Connected Financial Accounts (Plaid)

If you choose to connect a financial account through Covmont, we obtain information from the connected account through Plaid Inc. (“Plaid”), a third-party service that facilitates connections between financial institutions and our platform.

Covmont does not receive and does not store your bank login credentials.

When you connect a financial account, Plaid transmits financial account information to Covmont in accordance with your authorization. The information available to Covmont depends on the financial institution, connected account, and Plaid services used.

Use of Plaid is governed by Plaid’s End User Privacy Policy, which is available at: https://plaid.com/legal/#end-user-privacy-policy

1.4 Payment Information

When you purchase paid Services, payment processing is handled by Stripe, Inc. (“Stripe”). Stripe collects and processes your payment card details and billing information directly on its systems. Covmont does not receive or store complete payment card numbers or bank account numbers. We receive Stripe-generated identifiers, transaction metadata, and limited billing information necessary for account management, payment confirmation, and financial recordkeeping.

1.5 Information From Emails and Marketing Interactions

If you subscribe to updates, book a call, or submit a form, we may collect business and contact information, along with any other information you choose to provide. We use this information to manage requests, communicate with you about the Services, and maintain customer-relationship records. Our email service providers may collect delivery and engagement information, such as whether emails were delivered, opened, or clicked, to measure the effectiveness of our communications and maintain system reliability.

2. How We Use Personal Information

We use personal information to operate, improve, and protect the Services and to support you as a business user. We process personal information for the following purposes:

To operate and deliver the Services. We use personal information to create and manage accounts, authenticate users, and make the Services available.

To provide support and communicate with you. We use personal information to respond to questions, provide technical support, send service-related notices, inform you of changes to the Services or to our policies, and maintain records of communications.

To process payments and manage billing. We use Stripe-related identifiers and transaction metadata to process payments, manage paid plans, reconcile billing, and maintain legally required financial records.

To maintain security and prevent abuse. We use log data, device information, and security-related telemetry to protect accounts, detect fraudulent activity, prevent unauthorized access, monitor for suspicious behavior, and safeguard the integrity of our systems and your data.

To analyze usage and improve the Services. We use usage data, analytics information, and performance metrics to understand how the Services are used, identify opportunities to improve features, and optimize the overall user experience.

To conduct research and develop new capabilities. We may use de-identified or aggregated information to evaluate patterns and develop or improve the Services.

To comply with legal and regulatory obligations. We use personal information as necessary to comply with applicable laws, regulations, legal processes, and law enforcement requests, and to enforce our Terms of Service and other policies.

3. Automated Processing and AI-Supported Functionality

The Services may use automated analysis, machine learning, and AI-supported functionality to process and interpret business and financial information.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to help the Services function properly, to keep you signed in, and to understand how the Services are used.

4.1 Types of Cookies and Technologies

Essential cookies. Required to operate the Services, authenticate users, maintain secure sessions, and enable basic features.

Analytics cookies. Help us understand how users interact with the Services (e.g., Google Analytics).

Email and engagement tracking. Used by email providers to measure delivery and engagement.

4.2 Cookie Choices and Consent

You can manage cookies through your browser settings. If we display a cookie banner or preference center, it is used to honor your choices where required by law. Disabling certain cookies may limit functionality.

5. Information Sharing and Service Providers

We share personal information only as necessary to support the Services, comply with law, or as otherwise described in this Privacy Policy.

5.1 Service Providers

We share personal information with third-party service providers that help us operate, secure, and support the Services. These providers process information in accordance with their agreements with us and applicable law. Our current providers are listed on our Subprocessors page.

We may share connected financial account information and information derived from it with Covmont customers and other recipients as directed or authorized by the person or business that connected the account, and as otherwise described in this Privacy Policy.

5.2 Legal and Safety Disclosures

We may disclose personal information if we believe in good faith that such disclosure is required by law, necessary to protect the rights, property, or safety of Covmont, our users, or the public, or necessary to detect, prevent, or respond to fraud, security incidents, or other harmful activity.

5.3 Business Transfers

If Covmont is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, personal information may be transferred as part of that transaction. We do not sell personal information and do not share personal information with third parties for their own cross-context behavioral advertising.

6. Data Retention

We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, maintain security, and resolve disputes.

Our current retention periods, deletion paths, legal-hold process, and records preserved for tax or audit reasons are described in our Data Retention & Deletion Policy.

7. Your Rights and Choices

Your rights and choices may vary based on where you live, but we strive to provide a consistent baseline of control for all users, including rights to access, correct, delete, or limit certain uses of your personal information, and to opt out of marketing communications.

To submit any privacy rights request, you may contact us at privacy@covmont.com.

If your request involves deletion timing or retained financial records, please also review our Data Retention & Deletion Policy.

8. Do Not Track and Global Privacy Control

Some browsers include “Do Not Track” (DNT) or similar settings. Because there is no widely accepted standard for responding to these signals, the Services do not respond to DNT at this time. Where required by applicable law, we recognize and honor valid Global Privacy Control signals as requests to opt out of the sale or sharing of personal information.

9. Security

We use technical, administrative, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or destruction. These measures include encryption in transit, access controls, monitoring, and safeguards maintained with our service providers. No method of transmission or storage is completely secure; you are responsible for maintaining the confidentiality of your credentials and notifying us of any suspected unauthorized activity.

10. Children’s Privacy

The Services are intended for business use by adults and are not directed to children under thirteen (13) years of age. We do not knowingly collect personal information from children under 13. If you believe we may have done so, please contact us so we can take appropriate steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy and, where appropriate, provide additional notice. Changes become effective when posted unless otherwise stated or required by law.

12. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or our privacy practices, you may contact us at: