Privacy Policy

ProDIP Pty Ltd (“ProDIP,” “we,” “our”) operates the ProDIP AI Cost Agent platform. This Privacy Policy describes how we collect, use, share, and protect your information when you use our services.

1. Information We Collect

Account Information. When you create a ProDIP account, we collect your name, email address, company name, and billing information.

Financial Data via QuickBooks Online & Xero. When you connect your accounting platform through OAuth, we access financial data such as chart of accounts, transactions, invoices, bills, and vendor records. We request only the permissions necessary to deliver cost intelligence.

Usage Data. We automatically collect information about how you interact with our platform, including features accessed, queries run, session duration, and device information. This data helps us improve the service.

2. How We Use Your Information

We use the information we collect to:

• Provide cost intelligence, savings recommendations, and financial insights through the ProDIP AI Cost Agent
• Maintain, improve, and develop new platform features
• Communicate with you about your account, service updates, and security alerts
• Provide customer support and respond to inquiries
• Ensure platform security, detect fraud, and prevent abuse
• Comply with legal obligations and enforce our terms

3. QuickBooks & Xero Data

ProDIP connects to QuickBooks Online and Xero exclusively through OAuth 2.0. We never ask for or store your accounting platform credentials. Key principles:

• We use OAuth tokens granted by you to access your accounting data — you can revoke access at any time from your accounting platform's settings
• We request read-only access scopes — ProDIP does not write to or modify your accounting records
• Your credentials are never transmitted to or stored on our servers
• All financial data is encrypted at rest and in transit
• Your accounting data is never used to train AI models

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• SOC 2 aligned security practices and controls
• Role-based access controls and audit logging
• Regular security assessments and vulnerability testing
• Incident response procedures with prompt notification for any breach affecting customer data

5. Data Sharing

We do not sell your personal information or financial data. We may share information with:

• Infrastructure and service providers (cloud hosting, analytics) under strict data processing agreements
• Payment processors for billing and subscription management
• Legal authorities when required by law, subpoena, or court order

All third-party processors are contractually bound to confidentiality and data protection standards equivalent to or exceeding our own.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Export your data in a machine-readable format (portability)
• Restrict or object to certain processing activities
• Withdraw consent where processing is consent-based

To exercise any of these rights, contact us at privacy@prodip.ai. We will respond within 30 days.

7. Cookies

We use essential cookies to maintain your session and remember your preferences. We may also use analytics cookies to understand how visitors interact with our website. You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-platform notification at least 30 days before taking effect. Continued use of ProDIP after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

For questions about this Privacy Policy or our data practices, contact us at privacy@prodip.ai.