Privacy Policy

Effective date: October 30, 2026 · Last updated: November 11, 2026 1. Who we are Humdine is operated by Orden Investments LLC ("Humdine", "we", "us", "our"), 1 Innovation Way, Woodstock, GA 30188. This policy explains what information we collect through the Humdine website, apps and services (the "Service"), how we use it, and the choices you have. Questions: support@humdine.com. Humdine is used by businesses. For the business records an organization puts into Humdine (including information about its employees, vendors and customers), the organization decides what goes in and why, and we process that information on its behalf. If you are an employee or vendor of a business that uses Humdine and have a question about your information, please contact that business first; we will help them respond. 2. Information we collect Account information - Your name, email address, password (stored only as a secure hash by our authentication provider), and passkeys if you set one up. - Your organization, its locations, your role, and invitations you send or accept. - Your language and notification preferences. Business records you put into the Service - Vendors, purchase orders, invoices, bills, credits, payments, checks and expenses. - Bank account and routing numbers for printing checks, which you enter or, if you connect your bank, which we request from your bank through Plaid. They are stored encrypted. Only owners can view or change them in the Service, the full account number is never displayed, and they are used only to print checks. - Inventory, recipes, equipment, maintenance, compliance and document records. - Staff records used for payouts: names, positions, pay rates, and tips, reimbursements and paychecks you record. We do not ask for Social Security numbers. - Messages, notes and team channel messages you write in the Service. Uploaded files and forwarded email - Invoices, receipts, documents and photos you upload, and emails (with attachments) you forward to your organization's Humdine email address. Point-of-sale data - If you connect Toast or Square, we import sales data from that system for the connected location, such as daily sales totals and related figures. AI Coworker - Your conversations with the AI Coworker, the drafts it prepares, its memory notes and to-dos, and a record of actions it takes. Billing information - Your subscription, plan, invoices and payment status. Card and bank details for paying Humdine are collected and stored by Stripe; we do not see or store full card numbers. Usage and device information - Sign-in events, pages and features used, errors, timestamps, IP address, and browser and device information, and records of AI usage and its cost. - If you turn on push notifications, a push subscription for your browser or device. Bank connection (Plaid) - If an owner connects a business bank account, we receive through Plaid, read-only: account names, the last digits of each account number, balances, and transactions, including check numbers. We never see or store your bank login. Owners and operators can see balances and bank activity in the Service. What we receive, why, and how long we keep it is set out in "Bank connection (Plaid)" at the end of this policy. 3. How we use information - To provide the Service: store and show your records, scan documents, run reports, send the notifications and emails you expect, and run the AI features you use. - If you connect a bank, to show your real balance next to your checks and to mark checks as cleared when they post at the bank. - To bill you and enforce your plan, including measuring AI usage against your plan's AI budget. - To keep the Service and your account secure, prevent abuse and fraud (including bot checks at sign-up), and fix problems. - To provide support, including setup help you request from our team. Authorized Humdine staff can access your organization's data only when needed for support, setup, security or legal reasons. - To improve the Service, using aggregated or de-identified information where possible. - To comply with the law and enforce our Terms. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your business records to train AI models. Our AI provider, Anthropic, does not train its models on the data we send it under its commercial terms. 4. AI processing When you use AI features (scanning an invoice or receipt, or asking the AI Coworker something), the relevant content, such as the document image or your message and the records it needs, is sent to our AI provider, Anthropic, to produce the result. AI output can be wrong; see our Terms. Voice input in the AI Coworker uses your browser's built-in speech recognition. Depending on your browser, the audio may be processed by your browser's maker (for example Google or Apple); it is not sent to Humdine. 5. Service providers (subprocessors) We share information with these providers only as needed to run the Service, under contracts that limit how they may use it: - Supabase: database, file storage and authentication. - Vercel: application hosting. - Stripe: subscription billing and payment processing. - Anthropic: AI processing (document scanning and the AI Coworker). - Resend: sending email, and receiving the emails you forward to Humdine. - Cloudflare (Turnstile): bot protection on the sign-up form. - Browser push services (for example Google, Apple and Mozilla): delivering push notifications, if you turn them on. Services you choose to connect - Toast or Square: if you connect your point-of-sale system, we receive data from it. - Plaid: if you connect a business bank account, Plaid gives us read-only account, balance and transaction data and, when you ask for it, account and routing numbers. Plaid's End User Privacy Policy covers how Plaid handles your data. - QuickBooks Online: if you connect it when this becomes available. - Your own AI assistant: if you connect one through the Humdine connector, it can read and draft changes to your organization's data with your permission, and that provider's own privacy terms apply to what it receives. We may also disclose information if the law requires it, to protect rights, safety and security, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply. 6. Cookies and local storage We use cookies that are strictly necessary to keep you signed in and secure. We use your browser's local storage to remember preferences such as your theme and whether you dismissed the cookie notice. We do not use advertising or third-party tracking cookies. 7. How long we keep information - While your subscription is active, we keep your organization's data so the Service can work. - If a payment fails, your organization becomes read-only from day 15, and the subscription ends by day 45 if it is still unpaid. - After your subscription ends, your organization stays available read-only for 90 days so you can export your data. We email the owner 30, 7 and 1 days before that period ends. - After the 90 days, your organization is scheduled for deletion. A person at Humdine reviews and carries out the deletion; it is never automatic. Copies made by our hosting provider follow the provider's own retention schedule, so deleted data can remain in those copies for a while after it is removed from the live service. - Bank transactions from a connected bank are kept for 13 months, then deleted. Disconnecting a bank deletes its stored transactions and asks Plaid to remove the connection. Deleting an organization does the same for every bank it connected. - Some operational records are deleted on a fixed schedule regardless: system job logs after 30 days, sign-in rate-limit records after 7 days, processed AI Coworker event records after 90 days, AI task activity after 180 days, read notifications after 90 days and unread ones after 180 days, payment-webhook logs after 90 days, and AI usage and cost records after 400 days. - We may keep billing records, and records needed for security, fraud prevention or legal obligations, for as long as the law requires. 8. Security We protect information with encryption in transit (HTTPS), access controls by role and location, database-level row security that separates organizations, and limited staff access. Bank connection tokens and bank account and routing numbers are also encrypted at rest, and connecting, reconnecting or disconnecting a bank requires the owner to confirm with a passkey. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires. 9. Your choices and rights - You can view, correct and export your organization's data in the Service (exports are available to owners and operators), including during the read-only periods. - You can update your profile and notification settings at any time, and turn off push notifications. - Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, or to object to some uses. To make a request, email support@humdine.com. We will verify your request and respond within the time the law requires. We will not discriminate against you for exercising these rights. - To delete a whole organization, the owner can cancel and contact us; see section 7. 10. Where information is processed Humdine is based in the United States. Your organization's data is stored and processed in the United States: our database runs in a US data center, and our application is hosted in the United States. Some service providers listed in section 5 may process limited information in other countries under their own safeguards. 11. Children The Service is for businesses and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it. 12. Changes to this policy We may update this policy. For material changes, we will notify the owner by email or in the app before they take effect. The "Last updated" date at the top shows the latest version. 13. Contact Orden Investments LLC 1 Innovation Way, Woodstock, GA 30188 support@humdine.com