Deduct AI LLC, doing business as Empirical ("Empirical," "we," "us," or "our") provides the Empirical mobile application, website, and related services (the "Service").
Company: Deduct AI LLC
Mailing address: InCorp Services, Inc., 349 Kinderkamack Road, Westwood, NJ 07675 US
Privacy email: support@withempirical.com
Privacy contact: Privacy Team
This policy applies to the Service in the United States and Canada. It does not govern Plaid, a bank, an app store, or another service acting independently under its own privacy policy.
A country or bank connection being technically available does not mean Empirical supports that country's tax rules.
Do not provide Social Security numbers, Social Insurance Numbers, tax identification numbers, government identification documents, or other information the Service does not request.
If you connect an account through Plaid, we may receive account name/type, partial account identifiers, balances where enabled, transaction dates, amounts, merchant information, descriptions, currencies, categories, and connection status. The precise history and fields depend on the institution, country, consent, and Plaid products enabled.
Plaid or the financial institution handles authentication. We do not receive your online-banking password. The current Service does not initiate payments or move funds.
Do not upload unnecessary information about another person. Redact payment-card, health, identification, or other sensitive information that is not needed.
Subject to applicable law and user choices, we may process campaign information, app events, device or advertising identifiers, and hashed contact identifiers through analytics, attribution, or advertising providers.
We use information to:
We limit processing to purposes a reasonable person would consider appropriate and will provide a new notice or obtain consent where legally required for a materially different purpose.
The Service uses automated rules, optical character recognition, and artificial intelligence supplied by us or providers such as OpenAI to extract receipt information, suggest categories and possible deductions, identify missing documentation, estimate taxes, and generate business-health observations.
The system may consider merchant descriptions, amounts, dates, receipt text, occupation, work type, state/province, entity type, and user confirmations. Outputs can be wrong, incomplete, or outdated. Users can review and correct categories and should not treat an output as an official tax determination or professional advice.
Empirical does not use these outputs to approve credit, determine employment, deny benefits, file a tax return, or make another decision intended to produce legal or similarly significant effects.
We do not use identifiable receipt or bank data to train a general-purpose AI model unless we separately disclose the practice and obtain legally required consent. We call information anonymous only when it cannot reasonably be linked back to an individual.
We disclose information as reasonably necessary to providers such as:
| Provider/category | Purpose | Information potentially disclosed |
|---|---|---|
| Supabase/hosting providers | Authentication, database, storage | Account, profile, transactions, receipts, records |
| Plaid | Bank connection and transaction retrieval | Connection information and Plaid-requested data |
| OpenAI or other AI/OCR providers | Receipt extraction and categorization | Relevant receipt, transaction, and limited profile context |
| RevenueCat/app stores | Subscription management | App user ID, product, receipt, subscription status |
| OneSignal/messaging providers | Notifications | Push token, user ID, preferences, message events |
| Analytics providers such as Mixpanel | Product analytics | App events, pseudonymous identifiers, selected properties |
| Attribution providers such as AppsFlyer | Campaign measurement | Device/campaign identifiers and conversion events |
| Advertising providers such as Meta | Advertising measurement | Hashed identifiers, consent status, selected events |
| Support, security, and professional advisers | Operations and legal/accounting support | Information needed for the engagement |
We may also disclose information under valid legal process, to protect rights and safety, as part of a corporate transaction with appropriate safeguards, or at your direction.
We do not sell personal information for money. Some disclosures for targeted advertising or analytics may qualify as "sale," "sharing," or targeted advertising under US state law. Where applicable, we provide legally required opt-outs.
Connecting a bank is optional. Plaid provides its own consent and privacy disclosures. You may disconnect an account in Settings. Disconnection stops future retrieval but does not automatically delete information already imported into Empirical. You may delete imported data or your account subject to the retention rules below.
Essential technologies support authentication, security, purchases, and requested features. Optional analytics, attribution, advertising, and marketing are governed by applicable consent and opt-out requirements.
Users can manage available choices in Privacy Settings and unsubscribe from marketing messages. Service messages concerning security, purchases, policy changes, or requested features cannot always be disabled.
We retain information only as long as reasonably necessary for service, legal, security, accounting, dispute, and enforcement purposes.
| Information | Default retention target |
|---|---|
| Active account, profile, transactions, receipts, and reports | While the account is active |
| Deleted account operational data | Delete or de-identify within 30 days, subject to exceptions |
| Backups containing deleted data | Isolated and overwritten within 90 days |
| Security/account logs | Up to 24 months unless a shorter period is sufficient |
| Support records | Up to 24 months after closure |
| Subscription/accounting records | Period required by applicable law |
| Analytics/attribution | Configured vendor period, verified before launch |
| Legal holds/disputes | Until resolved plus applicable limitation period |
Deleting the app does not delete your account. Deleting your account does not cancel an app-store subscription. Independent controllers such as app stores may retain data under their own policies.
We use risk-appropriate measures such as encryption in transit, access controls, authentication safeguards, logging, vendor review, incident response, and secure development practices. No system is completely secure. Protect your credentials and promptly report suspected unauthorized use.
Empirical is based in the United States. Canadian information may be processed in the United States or other countries by us and our service providers. Those countries may have different privacy laws, and information may be accessible to courts, law enforcement, or national-security authorities under local law.
We remain accountable as required by applicable Canadian law and use contractual, organizational, and technical safeguards appropriate to the sensitivity of the information.
Depending on your location and applicable law, you may request access, correction, deletion, or a portable copy; withdraw consent subject to legal/contractual limits; opt out of targeted advertising or qualifying sale/sharing; and appeal certain privacy-request decisions.
Use in-app Privacy Settings or email support@withempirical.com. We may verify identity proportionately. Authorized agents must provide sufficient authority.
For Canadian users, we obtain meaningful consent where required and process information only for identified, appropriate purposes. Alberta, British Columbia, and Quebec have private-sector privacy statutes that may apply in addition to or instead of PIPEDA for certain intraprovincial processing; PIPEDA may still apply to interprovincial or international activity.
Canadian users may request access and correction, withdraw consent subject to lawful restrictions, and complain to our privacy contact. We maintain breach records and notify the proper regulator and affected individuals when the applicable legal threshold is met.
You may complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy commissioner.
Quebec: The Service is not currently available in Quebec.
Where an applicable US state privacy law covers Empirical, residents may have rights to access/know, correct, delete, obtain a portable copy, opt out of targeted advertising or certain disclosures, and appeal a denial. We will provide a "Your Privacy Choices" mechanism if required by our practices and statutory status.
Financial information, account credentials, precise location, government identifiers, and certain other categories may be sensitive data. We limit sensitive-data processing to providing and securing requested features unless we provide a separate notice and obtain required consent.
The Service is only for people aged 18 or older. We do not knowingly permit minors to create accounts. Contact us if you believe a minor supplied information.
We may update this policy for product, vendor, legal, or operational changes. We will provide notice of material changes and obtain consent where required. The "Last updated" date identifies the current version.
Deduct AI LLC
InCorp Services, Inc.
349 Kinderkamack Road
Westwood, NJ 07675 US
support@withempirical.com
https://withempirical.com
