Privacy Policy

Last updated 21 September 2026

This policy describes how Elie (the “Application”), operated by Elite Management, Inc. (the “Company”), handles data retrieved from connected business systems. It covers the Application only. It does not govern the Company’s consumer-facing websites or its relationships with the customers of its operating entities, which are addressed by those entities’ own published privacy policies.

1. Who this Application serves

Elie is a private internal application. It is used only by the Company and its affiliated operating entities, and it connects only to business systems owned by those entities. It does not accept connections from, process data on behalf of, or make data available to any outside organization.

2. What data the Application retrieves

The Application retrieves business records from systems the Company and its affiliated entities already operate. From connected QuickBooks Online company files this consists of accounting reports: general ledger detail, profit and loss on accrual and cash basis, balance sheet, and trial balance.

These records are primarily financial — accounts, dates, transaction types, and amounts. General ledger detail may additionally contain the names of parties to a transaction, including customers and vendors of the operating entities, and free-text descriptions entered by bookkeeping staff.

Access to connected accounting systems is read-only. The Application does not create, modify, or delete records in QuickBooks Online.

3. Where data is stored

Retrieved records are stored in cloud infrastructure operated under the Company’s own accounts and controlled by the Company. Data is encrypted in transit and at rest. Access is limited to authorized personnel of the Company and its affiliated entities.

Credentials for connected systems are held in a secret store, referenced by the Application rather than copied into its source code or configuration files.

4. Automated analysis, including AI

The Company uses large language model services, accessed through commercial APIs, to produce internal management reporting from data in its warehouse — written variance commentary, period summaries, and analyst-style queries run by the Company’s own staff.

Two limits apply to that processing:

• Names of transaction parties and free-text transaction descriptions are excluded from data sent to those services. Financial analysis is performed on accounts, amounts, dates, and entities. Customer and vendor names and memo text remain in the Company’s warehouse and are not transmitted to model providers.
• No data retrieved by the Application is used to train any model. Processing is performed through enterprise API endpoints under agreements that prohibit training on submitted data. Data is not submitted to consumer chat products.

Output produced this way is reviewed by the Company’s accounting personnel and is not used to make automated decisions about any individual.

5. Sharing

The Company does not sell, rent, license, or otherwise transfer data retrieved by the Application to any third party. Data is not shared with other organizations, pooled across organizations, or used for the benefit of anyone other than the organization whose systems it came from.

The Company uses infrastructure and service providers — cloud hosting and the model providers described in section 4 — which process data solely on the Company’s instructions and under contract. The Company may disclose data where required by law or valid legal process.

6. Retention

Accounting periods can be amended after they close, so the Application retains each retrieval as a dated snapshot rather than overwriting the previous one. This preserves an accurate record of what the books reported at a given point in time, which is necessary for audit and reconciliation.

Snapshots are retained for as long as the Company requires them for accounting, audit, and legal purposes. Disconnecting a company file stops further retrieval; see Disconnecting for how to request deletion of previously retrieved data.

7. Your choices

A user with appropriate rights to a connected company file may revoke the Application’s access at any time from within that system. Revocation takes effect immediately and prevents any further retrieval.

8. Security

The Company maintains administrative and technical safeguards appropriate to the sensitivity of the data, including encryption in transit and at rest, multi-factor authentication on the accounts controlling connected systems and stored data, and restriction of access to authorized personnel.

9. Changes to this policy

The Company may revise this policy. The revision date at the top of this page indicates when it was last changed.

10. Contact

Questions about this policy, or requests regarding data held by the Application, may be directed to privacy@askelie.ai.