1. Information We Collect
Black Cat Analytics LLC ("we," "us," or "the Company") collects information you provide when creating an account, including your name, email address, and password. We also collect financial data you upload such as rental income, expenses, booking records, and property details. This data is necessary to provide our analytics services.
We automatically collect usage data including IP addresses, browser type, pages visited, and feature usage to improve our service. We use cookies for authentication and session management.
2. How We Use Your Information
Your data is used to:
- Provide financial analytics, insights, and AI-powered recommendations
- Generate tax reports including Schedule E
- Process payments through Stripe (we never store full card numbers)
- Send account-related notifications and verification codes
- Improve our service and fix bugs
- Enforce our Terms of Service and protect the security of the platform
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Performance of contract: Processing necessary to provide the Service you signed up for
- Legitimate interest: Service improvement, security, and fraud prevention
- Consent: Non-essential cookies and marketing communications (where applicable)
- Legal obligation: Compliance with applicable laws and regulations
4. Data Storage & Security
Your data is stored securely on encrypted databases hosted by our infrastructure providers. We use industry-standard security measures including HTTPS/TLS encryption, hashed passwords (bcrypt), and secure session management. Financial data is never sold or shared with third parties for marketing purposes.
Data is stored and processed in the United States. By using the Service, you consent to the transfer of your data to the United States. For EEA users, such transfers are safeguarded by Standard Contractual Clauses where applicable.
5. Third-Party Services
We use the following third-party services:
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Sentry — Error monitoring. Collects anonymized error data to help us fix bugs.
- Vercel — Hosting. Subject to Vercel's Privacy Policy.
- Resend — Email delivery for verification codes and notifications.
- OpenAI — AI analysis. Financial data may be sent to OpenAI for generating insights. Subject to OpenAI's Privacy Policy.
We do not sell your personal data to any third party.
6. Cookies
We use the following types of cookies:
- Essential cookies: Required for authentication, session management, and basic functionality. These cannot be disabled.
- Analytics cookies: Used for error monitoring (Sentry) and service improvement. You can opt out of these via the cookie consent banner.
We do not use advertising or tracking cookies.
7. Data Retention & Deletion
You can delete all your data at any time from Settings → Danger Zone. You can also permanently delete your account, which removes all associated data from our servers. After account deletion:
- Account data is deleted immediately from our primary database
- Data is purged from all backups within 30 days
- Server logs containing your IP address are automatically deleted after 90 days
- Billing records may be retained for up to 7 years as required by tax law
8. Your Rights
You have the right to access, correct, export, or delete your personal data at any time. You can export your data as CSV files from the Tax & Reports page. To exercise any of these rights, use the in-app tools or contact us.
Rights for EEA/UK Users (GDPR)
If you are located in the European Economic Area or United Kingdom, you also have the right to:
- Restrict processing of your personal data
- Data portability (receive your data in a machine-readable format)
- Object to processing based on legitimate interest
- Lodge a complaint with your local Data Protection Authority
Rights for California Users (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise your CCPA rights, email us at support@tryblackcat.com.
9. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of discovery, as required by applicable law.
10. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided personal data, we will take steps to delete it.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy-related questions or to exercise your data rights, contact us at support@tryblackcat.com.
Black Cat Analytics LLC
New Hampshire, United States