Privacy Policy

1. Information We Collect

We may collect the following categories of information:

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve Cadris
• Create and manage user accounts
• Organize and display property and transaction data
• Generate financial reports and tax-ready summaries
• Enable accountant sharing and collaboration features
• Communicate with you about product updates, support, and service notices
• Monitor performance, security, and reliability
• Comply with legal obligations
• Prevent fraud, misuse, or unauthorized access

3. Financial Data and Connected Accounts

If you choose to connect a bank, Plaid provides account names, types, masked identifiers and transaction dates, amounts, descriptions, merchants and categories for the accounts you authorize. Cadris can request up to 365 days of initial transaction history and continue receiving updates until access is withdrawn. A connected account may contain personal transactions as well as property activity; marking activity as personal excludes it from rental reporting but does not erase it from the imported history. Bank connections support bookkeeping and do not authorize Cadris to move money.

We do not sell your financial data.

We use Plaid for financial connections and Base44 for hosting, authentication, storage and backend processing. Cadris receives provider access tokens instead of storing your bank login credentials. Your use of Plaid is subject to its privacy practices, available at plaid.com/legal. Bank data is accessible to you and authorized service administrators; accountants receive only the portfolio information you explicitly share.

Optional AI category suggestions send transaction descriptions, merchants, amounts, directions and property labels to Base44’s AI processors. Optional receipt reading sends the uploaded file to those processors for extraction and matching. Both require consent; bank AI stays disabled until the operator has approved provider data-use terms. AI suggestions require review and do not independently approve transactions. Base44’s AI and data-use practices depend on the service agreement and workspace plan. We do not claim that all Base44 processing is excluded from model training without provider confirmation.

Cadris records your bank and optional AI consent with the policy and disclosure versions and acceptance or withdrawal times. Disconnect a bank in Accounts & bookkeeping or withdraw all bank consent in Settings > Security to stop future access. Existing history remains until account closure. You can keep using manual entry and CSV imports.

4. How We Share Information

We may share information in the following limited circumstances:

• With service providers that help us operate the platform
• With analytics, hosting, infrastructure, communications, and payment providers
• With your invited collaborators, such as accountants, where you intentionally grant access
• When required by law, legal process, or government request
• To protect the rights, security, and integrity of Cadris, our users, or others
• In connection with a merger, acquisition, financing, or sale of assets

We do not sell personal information for money. If you choose to allow Meta cookies, we may share public website visits and verified account-registration, trial-start and paid Cadris subscription events with Meta to measure Facebook and Instagram ads. Shared data is limited to the event name and time, an opaque event identifier, advertising cookie identifiers, browser information and our homepage address. We do not send email addresses, bank or rental amounts, property or tenant records, transaction descriptions, private page addresses or custom event parameters. This optional advertising disclosure may constitute sharing under applicable privacy laws. Measurement stays off until you opt in and respects Global Privacy Control. The Meta browser script is excluded from sign-in, contact forms and private application pages; verified conversion events are sent by our server. We store your choice and advertising identifiers for up to 180 days and limited delivery receipts to prevent duplicate events. You can withdraw consent using Ad privacy on our public pages. A saved signed-in withdrawal stops future server conversion sharing for your account as well as browser sharing; it does not retract data Meta already received. Your account export includes the saved advertising consent, and account closure clears the identifiers. Meta processes received information under its own privacy policy at facebook.com/privacy/policy.

5. Data Retention

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records.

Confirmed account closure revokes connected bank access before deleting the supported portfolio and bookkeeping records, including imported bank activity, rules, preferences, receipts metadata, reconciliations, consent records and decision history. If revocation cannot be confirmed, closure pauses for support follow-up. Uploaded files are separately queued for provider removal with a target of 30 days; Cadris cannot promise immediate deletion from provider storage or backups. Billing, legal, security and backup records may follow separate retention requirements. Minimal account-closure and cleanup records remain to prevent reactivation and track outstanding removal. We request provider cleanup and retain confirmation when it completes.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including backend ownership checks, private uploads, encrypted banking and authenticator credentials, and an authenticator verification step for bank linking and banking actions. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

7. Third-Party Services

Cadris may rely on third-party providers for:

• Payment processing
• Analytics
• Cloud hosting
• Communication delivery
• Authentication
• Financial data connections through Plaid
• Hosting, authentication, storage and optional AI processing through Base44

These providers may process information on our behalf subject to their own terms and privacy practices.

8. Your Choices and Rights

Depending on your location, you may have rights to:

• Access certain personal information
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Opt out of marketing communications

To exercise these rights, contact us at admin@molierelabs.com.

9. Children's Privacy

Cadris is not intended for children under 13, and we do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may provide additional notice where appropriate.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: