Privacy Policy

Last updated: May 2026  ·  Effective immediately

1. Who We Are

Triad Advisory Group ("Triad Advisory," "we," "us") operates the Triad Advisory practice management platform at triadcpasoftware.com. We are a software company, not a tax or legal service provider.

2. Information We Collect

Account information: Name, email address, firm name, and billing information collected when you sign up.

Client data you upload: This includes client names, contact information, tax identification numbers (SSN/EIN), financial documents, and any other data you upload to manage your practice. This data belongs to you.

Usage data: Pages visited, features used, timestamps, and error logs to improve the Service.

Device information: Browser type, IP address, and operating system for security and analytics.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process payments and manage your subscription
• To send service notifications, invoices, and support responses
• To run AI document analysis features (processed by Anthropic — see Section 6)
• To detect fraud, security incidents, and technical errors
• To comply with legal obligations

We do not use your data for advertising. We do not sell your data to third parties.

4. Client Data and Professional Obligations

As a CPA or accounting professional, you remain responsible for your clients' data under applicable professional standards and privacy laws. Triad Advisory acts as a data processor on your behalf. We process client data only as directed by your use of the Service.

We recommend reviewing your engagement letters and client agreements to ensure they permit cloud-based document storage and AI-assisted review.

5. Data Storage and Security

• All data is stored in the United States on Railway's infrastructure.
• Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Access is controlled by role-based permissions within your firm.
• We maintain daily backups with 30-day retention.
• Security incidents are monitored via Sentry and reported to affected users within 72 hours of discovery.

6. Third-Party Services

We share data with the following service providers only as necessary to operate the Service:

• Clerk — Authentication and user management. Privacy policy
• Stripe — Payment processing. Card data never touches our servers. Privacy policy
• Anthropic — AI document analysis. Document content may be sent to Anthropic's API for processing. Anthropic does not train on API data by default. Privacy policy
• Railway — Cloud infrastructure and database hosting. Privacy policy
• Sentry — Error monitoring. Error reports may include stack traces but not client financial data. Privacy policy

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow export, then deleted. You may request earlier deletion by contacting us.

8. Your Rights

• Access: You can export all your data from within the app at any time.
• Correction: You can update your account information in Settings.
• Deletion: Contact us to delete your account and all associated data.
• Portability: Export your client data in CSV or PDF format from the app.

California residents have additional rights under CCPA. Contact us at the email below to exercise them.

9. Cookies

We use session cookies for authentication and local storage for user preferences (such as dark/light mode). We do not use advertising cookies or third-party tracking pixels.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children.

11. Changes to This Policy

We will notify you of material changes to this policy by email or in-app notification at least 14 days before they take effect.

12. Contact Us

Privacy questions or requests: hello@triadcpasoftware.com
Triad Advisory Group — triadcpasoftware.com