Privacy Policy

Last updated: October 19, 2026

1. Introduction

Kyriq (“we,” “our,” or “us”) provides this Privacy Policy to explain how we collect, use, disclose, and safeguard your information when you use our check reconciliation platform, including our web application, Chrome extension, and related services (collectively, the “Service”).

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, company name, and password when you create an account.
  • Financial Data: Check images, extracted check data (payee names, amounts, dates, check numbers), and QuickBooks transaction data that you voluntarily upload or connect to the Service.
  • Usage Data: Log data, device information, browser type, pages visited, and features used within the Service.
  • Integration Data: OAuth tokens and connection details for third-party services like QuickBooks Online, Xero, Sage, and Zoho that you authorize.

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Service
  • Process check images using AI-powered OCR extraction
  • Match extracted check data against your accounting software transactions
  • Improve and personalize your experience
  • Send administrative communications (account updates, security alerts)
  • Provide customer support
  • Comply with legal obligations

4. Data Storage and Security

Uploaded PDFs are sent to our processing server, which renders the pages and crops each check into its own image. The uploaded PDF and the cropped check images are then stored in Supabase Storage, and the extracted check data is stored in our Supabase database, so that you can review, re-check, and reconcile them. Temporary copies on the processing server (the PDF, page renders and OCR working files) are removed once extraction finishes. Data is sent to and from the Service over HTTPS. How long stored documents are kept is described in Section 7.

5. Third-Party Services

We integrate with the following third-party services:

  • Google (Gemini API): Check images are sent from our processing server to Google’s Gemini API for OCR extraction.
  • OpenAI: A fallback OCR engine; when enabled, check images may be sent from our processing server to the OpenAI API.
  • Hugging Face: Check images are sent to a NuMarkdown OCR model hosted on Hugging Face Spaces.
  • Railway: Hosts our processing server, which receives uploaded PDFs and runs extraction.
  • Supabase: Authentication, database, and file storage for uploaded PDFs and check images.
  • Vercel: Hosts the Kyriq web application and its API.
  • Intuit QuickBooks: For transaction matching and reconciliation. We access only the data you authorize via OAuth 2.0.

The Kyriq Chrome extension does not send check images or other data to Google or any AI provider directly; it communicates only with Kyriq’s own servers and the QuickBooks pages you open.

6. Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate the Service, when required by law, or with your explicit consent.

7. Data Retention

We retain your account data for as long as your account is active.

Uploaded source documents are deleted 14 days after the reconciliation they belong to is completed. The 14 days are counted from completion, not from upload, so a reconciliation you pause mid-month keeps its documents until you have finished with it. A scheduled job performs the deletion and removes the uploaded PDF from our storage.

The cropped check images are not removed by that job: they, the extracted check data, the match and approval results, and the reconciliation history remain stored until you delete the job in the Service or close your account. Deleting a job removes its PDF, check images, and extracted data from our storage and database. Records we are required to keep for billing and security purposes are retained separately.

You may also request deletion of your data at any time by emailing privacy@kyriq.com.

8. Your Rights

You have the right to:

  • Access, correct, or delete your personal information
  • Export your data in standard formats (CSV, JSON)
  • Revoke third-party integrations at any time
  • Close your account and request data deletion

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@kyriq.com.