Privacy Policy

1. Who we are

Fidelis Pulse is operated by Fidelis Strategy LLC, a United States company (“we”, “us”, or “our”). We provide financial dashboard software for business owners and their advisors. Questions about this policy can be directed to mafanasiev@fidelisstrategy.net.

2. Information we collect

We collect the following categories of information:

• Account information: name, email address, and password (stored as a bcrypt hash) when you register.
• Business financial data: revenue, expenses, payroll, cash, and other financial metrics you enter manually or that are imported via connected data sources (QuickBooks, Xero, Plaid, Stripe, etc.).
• OAuth tokens: access and refresh tokens for connected third-party services, stored encrypted at rest.
• Usage data: pages visited, actions taken, and timestamps, used to operate and improve the service.
• Log data: IP address, browser type, and request metadata collected automatically by our infrastructure.

3. How we use your information

• To provide and operate the Fidelis Pulse service.
• To sync financial data from connected sources and display it on your dashboard.
• To send transactional emails (account setup, password reset, billing notices).
• To send optional onboarding emails (you can unsubscribe at any time via the link in any email).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data or business financial data to third parties.

4. QuickBooks and Intuit data

When you connect QuickBooks Online, we access your accounting data (transactions, customers, reports) solely to populate your Fidelis Pulse dashboard. We do not share your Intuit data with any third party except as required to operate the service (e.g., storing encrypted tokens in our database). Your Intuit credentials are never stored - only OAuth tokens. You may disconnect QuickBooks at any time from your setup page, which revokes our access.

5. Data sharing

We share data only with:

• Infrastructure providers: Vercel (hosting), Neon (Postgres database), Resend (email delivery), Sentry (error monitoring). Each processes data solely to provide their services to us.
• Stripe: for billing and subscription management. Stripe’s privacy policy governs data they process.
• Law enforcement or regulators when required by applicable law.

6. Data retention

We retain your account and financial data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage of OAuth tokens, bcrypt password hashing, and role-based access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at mafanasiev@fidelisstrategy.net. We will respond within 30 days.

9. Cookies

We use only essential session cookies required to keep you signed in. We do not use advertising cookies or third-party tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the application. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Fidelis Strategy LLC
United States
mafanasiev@fidelisstrategy.net