Privacy Policy

Last Revised on JULY 11, 2026

This Small Street Privacy Policy ("Privacy Policy") describes how Small Street ("Small Street," "Company," "We," "Our," "Us") collects, uses, discloses, and safeguards information in connection with your access to and use of the Small Street website, platform, and related services (collectively, the "Platform"). Platform users may be referred to in this Privacy Policy as "you" and "your" as applicable. By using this Platform, you represent that you are an adult of 18 or more years of age, have the legal capacity to enter a contract, and agree to comply with and be bound by this Privacy Policy. Please review this Privacy Policy carefully. Capitalized terms used but not defined here have the meanings assigned to them in the Terms of Service.

1. Information We Collect. We collect information that you provide directly, information from integrations you authorize, and information collected automatically when you use the Platform.

(a) Personal Information. Information that identifies or can reasonably be linked to you, including: (i) email address, (ii) authentication information, (iii) account and profile information, and (iv) connected account identifiers.

(b) Business Financial Information. If you choose to connect your accounting platform, we collect business financial data necessary to provide the Platform’s functionality. This may include: (i) profit and loss statements, (ii) balance sheet data, (iii) cash flow statements, (iv) general ledger details, (v) transaction-level records, and (vi) business metadata (e.g., industry, region, business size). This data is normalized, anonymized, and aggregated to produce benchmarking and analytics insights., anonymized, and aggregated to produce benchmarking and analytics insights.

(c) Payment Information. If you subscribe to paid services, payment information is processed by our third-party payment processor. Payment Information may include: (i) credit or debit card numbers, (ii) bank account and ACH details, (iii) billing name and address, and (iv) transaction history related to subscription payments. We do not store or have access to your full payment details.

(d) Technical and Usage Information. We automatically collect certain information to maintain the security, stability, and reliability of the Platform, including: (i) device information, (ii) IP address, (iii) usage logs, and (iv) performance and diagnostic data.

2. How We Use Your Information. We use the information we collect for legitimate business and operational purposes, including: (i) providing, maintaining, and improving the Platform; (ii) authenticating users and managing accounts; (iii) processing and analyzing business financial information; (iv) communicating with you regarding updates, security matters, and administrative issues; (v) enhancing Platform integrity, preventing fraud, and ensuring trust and safety; (vi) developing new features and services; (vii) complying with applicable laws, regulations, and contractual obligations; (viii) enforcing our Terms of Service; (ix) conducting advertising, marketing, and promotional activities, including evaluating campaign performance; and (x) fulfilling any other purpose for which you provide consent.

3. How We Share Information.

(a) Aggregated and Anonymized Data. We may use, license, or disclose aggregated or anonymized data for analytics, benchmarking, research, or other commercial purposes. Such data does not identify any individual or specific business.

(b) No Sale of Personal Information. We do not sell or rent personal information.

(c) Service Providers and Partners. We may share information with service providers who assist in operating the Platform. These parties only process information on our behalf and under appropriate safeguards.

(d) Business Transactions. Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, or similar corporate event.

(e) Legal Compliance and Protection. We may disclose information to: (i) comply with applicable laws, legal processes, and governmental requests; (ii) protect rights, property, or safety; or (iii) detect, prevent, or address fraud, security, or technical issues.

4.Your Choices. You may exercise certain choices regarding your information. You may request deletion of your account at any time. Upon receipt of such a request, we will remove your Personal Information and Payment Information from active systems, subject to our ability to retain certain information for legal compliance, recordkeeping, or legitimate business needs. Aggregated or anonymized data previously incorporated into our datasets may continue to be retained. Depending on your jurisdiction, additional rights may apply.

5. Security of Your Information. We implement reasonable administrative, technical, and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security. We require our service providers and partners to maintain appropriate safeguards consistent with this Privacy Policy. By using the Platform, you agree that we may communicate with you electronically regarding privacy, security, and administrative matters. If we become aware of a security incident involving your information, we may notify you as required by applicable law.

6. International Users. The Platform is operated from the United States. If you access the Platform from outside the United States, you acknowledge and agree that your information may be transferred to, stored in, and processed in the United States or other jurisdictions that may have data protection laws different from those in your jurisdiction.

7. External Websites. The Platform may contain links to external websites or services that we do not control. We are not responsible for the privacy practices, content, or policies of such third parties. You should review the applicable privacy policies before providing any information to those websites.

8. Children’s Privacy. The Platform is not directed to individuals under the age of eighteen (18), and we do not knowingly collect Personal Information from children. If we learn that we have inadvertently collected such information, we will take reasonable steps to delete it.

9. Changes to This Privacy Policy. We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this Policy. Your continued use of the Platform after the posting of changes constitutes your acceptance of those changes.

10. Third-Party Service Providers. We rely on trusted third-party providers to support the Platform. Each provider processes information solely as necessary to perform its services and pursuant to its own privacy policy.

(a) QuickBooks Online (Intuit). We use a service provided by Intuit to facilitate the secure connection of your accounting data. Intuit’s handling of information is governed by its privacy policy available at https://www.intuit.com/privacy.

(b) Clerk. We use services provided by Clerk, Inc. to support authentication, account sign-up, and user management. Clerk’s handling of information is governed by its privacy policy available at https://clerk.com/legal/privacy.

(c) PostHog. We use a service provided by PostHog, Inc. to provide analytics data regarding user interaction with our Platform. PostHog’s tracking and use of information collected about you is governed by the PostHog privacy policy available at https://posthog.com/privacy.

We also use PostHog’s session‑replay technologies to record your interactions with the Platform to help us diagnose problems and improve our services. These technologies allow us to watch a DVR‑like visual video playback of user sessions and capture user activities such as clicks, mouse movements, scrolls, and keystrokes/key touches, and may collect personal information from and about you. You may opt out of session recording by PostHog at https://posthog.com/session-replay.

(d) Resend. We use services provided by Resend, Inc. to deliver transactional and administrative emails. Resend’s handling of information is governed by its privacy policy available at https://resend.com/legal/privacy-policy.

(e) Sentry. We use services provided by Functional Software, Inc. d/b/a Sentry to monitor application errors and performance so we can diagnose and fix problems. Sentry’s handling of information is governed by its privacy policy available at https://sentry.io/privacy/.

We may also use Sentry’s session-replay technologies to record your interactions with the Platform to help us diagnose problems and improve our services. These technologies capture user activities such as clicks, mouse movements, and scrolls, and may collect personal information from and about you. Text you type and other sensitive content are masked before capture by default.

(f) Stripe. We use services provided by Stripe, Inc. to process subscription payments and related billing activities. Stripe’s handling of information is governed by the Stripe privacy policy available at https://stripe.com/privacy.

(g) Railway. We use services provided by Railway to host components of our backend infrastructure. Railway’s handling of information is governed by its privacy policy available at https://railway.app/legal/privacy.

(h) Cloudflare. We use services provided by Cloudflare, Inc. to store uploaded documents and platform files in object storage and to provide content delivery, DNS, and security services in front of the Platform. Cloudflare’s handling of information is governed by its privacy policy available at https://www.cloudflare.com/privacypolicy/.

(i) Anthropic. We use services provided by Anthropic, PBC to power AI features of the Platform, including document extraction and analysis. Anthropic’s handling of information is governed by its privacy policy available at https://www.anthropic.com/legal/privacy.

(j) Knock. We may use services provided by Knock Labs, Inc. to orchestrate and deliver notifications, such as email and in-app messages. Knock’s handling of information is governed by its privacy policy available at https://knock.app/legal/privacy-policy.

11. Contact Information. If you have any questions about this Privacy Policy or our practices, please contact us:

Small Street

legal@smallstreetusa.com

End of Document