Last Updated: August 25, 2026
Wesley AI Inc. ("Wesley," "we," "us," or "our") provides software and technology for accounting firms, accountants, bookkeepers, and other businesses, including AI-assisted bookkeeping, document processing, financial data connections, accounting workflows, client collaboration, reporting, and related services.
This Privacy Policy explains how Wesley collects, uses, discloses, and protects personal information when you visit our websites, communicate with us, create or use a Wesley account, or otherwise interact with our products and services (collectively, the "Service").
This Privacy Policy also explains how we handle information that our business customers submit to the Service about their clients, employees, vendors, and other individuals.
Wesley handles personal information in different capacities depending on the context.
When you visit our website, request a demo, communicate with us, create an account, subscribe to the Service, or otherwise interact directly with Wesley, we generally determine how and why your personal information is processed.
This may include information about accounting firms, prospective customers, account administrators, authorized users, website visitors, and business contacts.
Accounting firms and other customers may submit, upload, connect, generate, or otherwise make available information through the Service relating to their own clients, employees, vendors, counterparties, and other individuals ("Customer Data").
Customer Data may include financial records, bank transactions, statements, receipts, invoices, checks, accounting records, contact information, tax-related information, documents, communications, and other information provided in connection with accounting and bookkeeping workflows.
For this Customer Data, Wesley generally acts as a service provider or processor on behalf of the customer. The customer determines why the data is processed and is responsible for providing appropriate privacy notices and obtaining any rights, permissions, or consents required to provide the data to Wesley.
If you are an individual whose information has been submitted to Wesley by an accounting firm or another Wesley customer, you should generally direct privacy requests concerning that information to the organization that provided your information to Wesley. We will assist our customers with such requests where required by law or our contractual obligations.
Where applicable, Wesley's processing of Customer Data may also be governed by a Data Processing Addendum ("DPA") between Wesley and the customer.
The information we collect depends on how you interact with Wesley.
We may collect:
We may collect information about:
Payments may be processed by third-party payment processors such as Stripe.
Our payment processors may collect payment card numbers and other payment credentials directly. Wesley may receive limited billing information, such as payment status, transaction identifiers, billing contact information, card type, and the last digits of a payment card.
We do not need to receive or store complete payment card numbers when payment information is collected directly by our payment processor.
When customers use the Service, Customer Data may include:
The exact information processed depends on the features and integrations selected by the customer.
When you connect a financial institution, accounting platform, payment processor, or other third-party service, we may receive information made available through that connection.
Such services may include financial connectivity providers such as Plaid and accounting platforms such as QuickBooks.
The third-party provider may independently collect information necessary to establish or maintain the connection. Its collection and use of information is governed by its own privacy practices.
We collect information contained in files and content submitted to the Service, including PDFs, spreadsheets, CSV files, images, statements, invoices, receipts, accounting exports, client portal submissions, and other records.
Documents may contain personal information about individuals other than the person uploading the document.
If you communicate with Wesley, we may collect the contents of those communications and associated information, including:
When you use our website or Service, we may automatically collect:
We do not intentionally collect precise geolocation through our general website analytics unless a particular feature requires it and appropriate notice is provided.
We may receive information from:
We may use personal information to:
This includes using information to:
We may use information to:
Where appropriate, we may use aggregated or de-identified information for these purposes.
We may process information to:
We may use information to:
We may use business contact information to:
You may unsubscribe from marketing emails at any time using the unsubscribe mechanism included in the communication.
Service, billing, security, and other transactional communications may continue even if you opt out of marketing communications.
We may process information to:
Wesley uses artificial intelligence, machine learning, optical character recognition, rules, and other automated technologies to provide features such as:
To provide these features, relevant portions of Customer Data may be processed by Wesley and approved AI service providers.
Our AI providers may include OpenAI and Google AI services, as described in our Trust Center and current subprocessor information.
Wesley does not use Customer Data or client financial data to train public or general-purpose AI models.
We require our use of AI providers for Customer Data to be limited to supporting Wesley's services and permitted processing purposes, subject to applicable contractual and technical safeguards.
We may use aggregated, de-identified, operational, diagnostic, or usage information to improve Wesley's products and services where such information does not reasonably identify a customer, customer client, or individual.
AI-assisted accounting features are designed to support human review.
Automated processing may generate suggestions, classifications, extractions, matches, or other outputs. Wesley customers remain responsible for reviewing and approving accounting outputs as appropriate.
If you connect a Google account, Wesley may access the Google account information and permissions necessary to provide the features you authorize.
For Gmail functionality, Wesley may access your email address and permissions required to send messages from your account.
Wesley sends Gmail messages only when you compose, review, authorize, or otherwise initiate those messages through Wesley.
Wesley does not use the Gmail API to broadly read or synchronize your inbox, sent mailbox, mailbox history, or attachments unless a feature is separately disclosed to you and authorized by you.
Messages sent through Gmail remain available through Google's services according to Google's functionality and retention practices.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including applicable Limited Use requirements.
Google Workspace API information is not:
We do not permit people to access Google Workspace API information except when:
You may disconnect your Google account through available settings to stop future access.
If you connect a Microsoft 365 or Outlook account, Wesley may access your Microsoft account information and the permissions required to provide functionality you authorize, including creating and sending messages and attachments.
Wesley may create a temporary draft when necessary to prepare an authorized outgoing email. Where technically practicable, temporary drafts that are no longer needed are removed.
Wesley does not use Microsoft Graph to broadly read or synchronize your inbox, sent mailbox, or mailbox history unless a separately disclosed feature requires and receives appropriate authorization.
Microsoft account information obtained through these integrations is not sold, used for advertising, or used to train generalized or public AI models.
You may disconnect your Microsoft account through available settings to stop future access.
We may disclose personal information in the circumstances described below.
We use third parties to help operate and provide the Service.
These providers may perform functions such as:
Current providers may include services such as Clerk, Vercel, Supabase, Upstash, Plaid, Intuit QuickBooks, Stripe, OpenAI, Google AI services, and communications providers.
Our current subprocessor information may be made available through our Trust Center or security review materials.
Service providers and subprocessors may process information only for appropriate purposes in connection with the services they provide to Wesley, subject to applicable contractual requirements.
We disclose information when you direct or authorize us to do so, such as when you:
Organization administrators and authorized users may be able to access information associated with their organization's workspace according to the permissions established by the organization.
Customers are responsible for configuring appropriate user access and permissions.
We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary for legitimate business or legal purposes.
We may disclose information if we reasonably believe disclosure is necessary to:
If Wesley is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, information may be disclosed or transferred as part of that transaction or related due diligence.
Any successor's handling of personal information will remain subject to applicable law.
Wesley does not sell Customer Data or client financial data for monetary consideration.
Wesley does not use Customer Data or client financial data for targeted advertising.
Our public website may use advertising, analytics, measurement, or similar technologies to understand website traffic, measure advertising campaigns, and market Wesley's business services.
These technologies may disclose limited information such as:
to advertising or analytics providers.
Under certain U.S. state privacy laws, some uses of advertising technologies may be considered a "sale," "sharing," or processing for "targeted advertising" even when no money is exchanged.
Where applicable law provides an opt-out right, we provide or will honor applicable methods for exercising that right, including legally recognized opt-out preference signals where required.
We do not knowingly sell or share personal information of individuals under 18 for targeted advertising.
Wesley and our service providers may use:
We may use these technologies for:
To provide authentication, maintain sessions, prevent fraud, secure the Service, and provide requested functionality.
To understand how visitors use our website and Service and to improve reliability and performance.
On our public website, we may use technologies to measure advertising performance and understand whether marketing campaigns result in website visits, demo requests, or other interactions.
You can control certain cookies through your browser settings and, where provided, through Wesley's cookie or privacy preference controls.
Where required by applicable law, we honor recognized opt-out preference signals, such as Global Privacy Control, for processing subject to those signals.
Blocking certain essential technologies may prevent portions of the Service from functioning properly.
We may create aggregated or de-identified information from information processed through the Service.
We may use this information for:
Where we maintain information as de-identified information under applicable law, we will take reasonable measures designed to prevent it from being associated with an identifiable individual and will not attempt to re-identify it except where permitted by law.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, taking into account:
Customer Data is generally retained while the applicable customer account remains active.
When a customer voluntarily closes its account, Customer Data generally enters a post-termination retention period of up to 60 days, after which it may be deleted from active systems, unless longer retention is required by law, contract, security requirements, dispute preservation obligations, or another legitimate reason.
Customers should export any information they wish to retain before account closure.
If an account is suspended, an additional reinstatement period may apply before the account is considered closed and the post-termination deletion period begins.
Information deleted from active systems may remain in encrypted or otherwise protected backups, logs, disaster recovery systems, or other systems for a limited additional period until those records are overwritten or expire through our normal backup lifecycle.
We generally do not restore information from backups for the purpose of continuing ordinary processing after the information has been deleted from active systems.
We may retain limited information after account closure when reasonably necessary for purposes such as:
When retention is no longer reasonably necessary, information is deleted, anonymized, or otherwise disposed of according to our retention practices.
Wesley maintains administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
Access to Customer Data by Wesley personnel is intended to be limited to individuals who require access for legitimate business purposes such as support, security, troubleshooting, or authorized operations.
No electronic transmission or storage system is completely secure. Accordingly, we cannot guarantee absolute security.
Additional information about Wesley's security program, subprocessors, AI data handling, and security readiness is available through our Trust Center and security review materials.
If Wesley becomes aware of a security incident involving personal information, we will investigate and respond in accordance with our incident response procedures.
Where required by applicable law or contract, we will provide applicable notifications to affected customers, individuals, regulators, or other parties.
Where Wesley processes Customer Data on behalf of a customer, notification obligations may also be governed by our agreement or DPA with that customer.
Wesley and our service providers may process information in the United States and other countries.
As a result, information may be transferred to jurisdictions with data protection laws that differ from the laws where you reside.
Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful mechanism or other measures required by applicable law.
Depending on where you reside and whether a particular privacy law applies to Wesley's processing of your information, you may have rights concerning your personal information.
These may include the right to:
These rights are subject to applicable exceptions and limitations.
You may submit a privacy request by contacting us at:
Please identify your request as a "Privacy Request."
You may also use any privacy request, privacy choices, or account mechanism that Wesley makes available for the relevant request.
We may need to verify your identity before fulfilling certain requests. Verification may depend on the nature of your request and the sensitivity of the information involved.
We will respond within the period required by applicable law.
Where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf.
We may require information reasonably necessary to verify the agent's authority and, where permitted, your identity.
If applicable law provides a right to appeal a decision concerning your privacy request, you may submit an appeal by replying to our decision or contacting us at the email address above and identifying the request as a "Privacy Appeal."
We will not unlawfully discriminate against you for exercising privacy rights provided by applicable law.
If Wesley possesses your information only because one of our customers submitted it to the Service, that customer generally controls the information and determines how it is processed.
For example, if your accountant, bookkeeper, or accounting firm uses Wesley to process your financial records, you should generally submit a privacy request concerning those records directly to that firm.
If we receive such a request directly from you, we may:
Wesley will not independently modify or delete Customer Data contrary to a customer's instructions unless required by law.
Residents of certain U.S. states may have additional rights under comprehensive state privacy laws.
These provisions apply only to the extent the applicable law applies to Wesley and the relevant processing.
During the preceding 12 months, we may have collected the following categories of personal information:
| Category | Examples |
|---|---|
| Identifiers | Name, email address, telephone number, business address, IP address, account identifiers, device identifiers |
| Customer records | Contact information, billing information, financial account-related information, records submitted through the Service |
| Commercial information | Subscription information, payment history, transactions with Wesley, product and demo activity |
| Internet or electronic activity | Browsing activity, website interactions, application usage, device information, logs, cookie identifiers |
| Professional information | Employer, accounting firm, company, professional role, job title |
| Financial information | Account information, balances, transaction histories, statements, accounting records and related Customer Data |
| Inferences | Limited insights derived from website, marketing, or product interactions used to understand interest in Wesley or improve the Service |
| Sensitive personal information | Account authentication information, certain financial account information, and sensitive information that may appear within Customer Data or documents submitted by customers |
We may also process other categories of information contained within Customer Data at the direction of our customers.
We obtain these categories of information from:
We process these categories for the purposes described in this Privacy Policy, including:
Depending on the information and purpose, we may disclose information to:
We do not sell Customer Data or client financial data for monetary consideration.
We do not share Customer Data or client financial data for cross-context behavioral or targeted advertising.
Limited identifiers and internet or electronic activity from visitors to Wesley's public website may be disclosed to advertising or analytics providers for advertising measurement or targeted advertising.
Depending on applicable law, those activities may constitute "sale" or "sharing" even when Wesley receives no money for the information.
Where applicable, residents may opt out as described in Section 8.
Wesley uses sensitive personal information only as reasonably necessary to:
We do not use Customer Data containing sensitive personal information to build advertising profiles or target advertisements to individuals.
We retain each category of personal information only for as long as reasonably necessary for the purposes for which it was collected or processed, using the retention criteria described in Section 11.
This section supplements this Privacy Policy for California residents to the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to Wesley's processing.
California residents may have the right, subject to applicable exceptions, to:
Wesley does not sell Customer Data or client financial data.
If Wesley engages in website advertising activity treated as "sharing" under the CCPA, eligible California residents may exercise applicable opt-out rights through the privacy choices mechanism made available by Wesley or through a legally recognized opt-out preference signal where required.
We will not use sensitive Customer Data for purposes that require a right to limit under the CCPA unless we provide any legally required notice and mechanism.
Residents of states with applicable comprehensive privacy laws, including states such as Colorado and Delaware, may have rights to:
Where applicable law requires Wesley to recognize a universal opt-out mechanism or opt-out preference signal, we will process qualifying signals in accordance with applicable law.
If data protection laws of the European Economic Area, United Kingdom, or Switzerland apply to our processing of your personal information, you may have additional rights under applicable law.
Depending on the circumstances, Wesley may process personal information based on:
Where processing is based on consent, you may withdraw consent at any time without affecting processing that occurred before withdrawal.
You may also have rights to access, correction, deletion, restriction, portability, and objection, and the right to lodge a complaint with an applicable data protection authority.
This section does not mean that every Wesley service or processing activity is subject to European privacy laws.
The Wesley website and Service are designed for businesses and professional users and are not intended to be used directly by children.
We do not knowingly permit individuals under 18 to create Wesley business accounts.
Because Wesley customers use the Service to manage their own accounting and financial records, Customer Data submitted by a customer could contain information relating to individuals under 18. In such circumstances, Wesley processes that information on behalf of the customer rather than collecting it directly from the child for Wesley's own purposes.
If we learn that we have directly collected personal information from a child in a manner prohibited by applicable law, we will take appropriate steps to delete or otherwise address the information.
The Service may integrate with or link to third-party websites, products, and services.
Those third parties may independently collect and process personal information according to their own privacy policies.
Except where Wesley acts as responsible for a provider's processing under applicable law or contract, Wesley is not responsible for the independent privacy practices of third-party services.
We encourage users to review the privacy policies of services they choose to connect to Wesley.
We may update this Privacy Policy periodically to reflect changes to:
When we update this Privacy Policy, we will update the "Last Updated" date at the top of the policy.
If changes materially affect how we process personal information, we may provide additional notice through the Service, by email, or through another reasonable method where appropriate or required by law.
If you have questions about this Privacy Policy, Wesley's privacy practices, or a privacy request, contact us at:
Wesley AI Inc.
Email: support@wesley-ai.co
Please use the subject line "Privacy Request" for requests to exercise privacy rights.