Last updated: July 25, 2025

1. Introduction

Accelio Limited ("we," "our," or "us") operates the Accelio platform, an AI-powered financial modeling and analysis service. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, platform, and services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address and profile information
• Subscription Data: Billing information, payment methods, subscription status, and transaction history
• Communication Data: Email correspondence, support requests, and newsletter subscriptions

2.2 Financial and Business Data

• Financial Models: Custom financial projections, assumptions, and modeling parameters
• Company Data: SEC filings, financial statements, and company research you upload or analyze
• Analysis Results: AI-generated financial analysis, projections, and recommendations
• Voice Data: Audio recordings and transcripts from voice analysis features
• Research Content: Canvas research data, saved outputs, and organized folders

2.3 Technical Information

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Server logs, error reports, and system performance data
• API Usage: API key usage, request patterns, and rate limiting data

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide, maintain, and improve our financial modeling platform
• Process financial data and generate AI-powered analysis
• Enable voice recording and transcript analysis features
• Manage user accounts, authentication, and access controls
• Process payments and manage subscriptions

3.2 Communication and Support

• Respond to inquiries and provide customer support
• Send service-related notifications and updates
• Deliver newsletters and educational content (with consent)
• Notify users of new features and service improvements

3.3 Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Implement rate limiting and security measures
• Comply with legal obligations and regulatory requirements
• Maintain audit trails and security logs

4. Third-Party Services

We work with trusted third-party service providers to deliver our services:

4.1 Payment Processing

• Stripe: Processes payments and manages subscription billing. Stripe's privacy policy applies to payment data.

4.2 Authentication Services

• Google OAuth: Provides secure authentication services. Google's privacy policy applies to data processed during authentication.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our platform
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Consent: With your explicit consent for specific purposes

6. Data Security

We implement robust security measures to protect your information:

• End-to-end encryption for data transmission
• Secure password hashing and authentication
• Regular security audits and vulnerability assessments
• Rate limiting and fraud detection systems
• Secure server infrastructure with access controls
• Regular data backups and disaster recovery procedures

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

7.1 Essential Cookies

• Session management and authentication cookies
• Security cookies for fraud prevention
• Load balancing and performance cookies

7.2 Analytics Cookies

• Vercel Analytics for platform performance monitoring
• Usage analytics to improve our services
• Error tracking and debugging information

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

8. Data Retention

We retain your information for different periods based on the type of data:

• Account Data: Retained while your account is active and for 7 years after account closure
• Financial Models: Retained while your account is active and for 7 years after deletion
• Transaction Data: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 2 years for security and analytics purposes
• Voice Recordings: Retained while your account is active or until you delete them

9. Your Rights

Depending on your location, you may have the following rights:

9.1 General Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data (subject to legal requirements)
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests

9.2 Marketing Communications

• Unsubscribe from newsletters and marketing emails
• Opt out of promotional communications
• Manage communication preferences in your account settings

To exercise these rights, contact us at info@marshwallai.com. We will respond within 30 days of receiving your request.

10. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions for transfers to countries with equivalent protection
• Binding corporate rules for transfers within our corporate group

11. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting a notice on our platform
• Sending an email notification to registered users
• Updating the "Last updated" date at the top of this policy

Your continued use of our Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Regulatory Compliance

We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy regulations. This policy is designed to ensure transparency and accountability in our data processing practices.