1. Who we are and what this covers
This Privacy Policy explains how Anvil Score, operated by Tessio Labs LLC ("Anvil," "we," "us") collects, uses, shares, and protects information when you use the Anvil Score web application at https://app.anvilscore.com and related services (the "Service"). It applies alongside our Terms of Service. Anvil is built for businesses; this policy covers information about the business and about the people who use the Service for it.
2. Information we collect
Information you give us
- Account details: your email address, name, and business or firm name, and the people you invite to your workspace.
- Business answers: figures and answers you enter in the walkthrough, such as revenue, owner pay, add-backs, and facts about the business, plus any notes you record on how an item was treated. If your business is managed by an accounting firm in Anvil, the firm may enter or connect this information for you. Answers stay on your device until they are saved to your account on our servers: when you save your score, or whenever a firm manages your business in Anvil.
- Files you upload: spreadsheets or exports from your business software, such as the Anvil template workbook. These can include customer names, job and invoice details, and timesheets.
- Messages: what you send us when you contact support.
Information from software you connect
You choose whether to connect any outside software. We only receive data after you approve the connection.
- QuickBooks Online: with your permission through Intuit's consent screen, we read your company information (such as company name, address, and fiscal year), chart of accounts, and profit and loss and balance sheet reports. We request QuickBooks' accounting permission only, and Anvil only reads: it never creates, changes, or deletes anything in your QuickBooks company. We do not request access to QuickBooks Payments, payroll, or your bank login. Intuit gives us access tokens for the connection; we never see your Intuit password.
- Simpro and similar field-service software: company details, jobs, invoices, quotes, customers, employee and contractor lists, and timesheets, read with the credentials you provide.
Information collected automatically
- Usage and device data: IP address, browser and device type, pages visited, and timestamps, recorded in server logs.
- Cookies and browser storage: cookies that keep you signed in, protect sign-in and connection flows, and remember preferences such as your last workspace, and browser storage that saves your walkthrough progress and dashboard state on your device. We do not use advertising or cross-site tracking cookies.
Payment information
Payments are handled by Stripe. We receive the status of your subscription and limited card details (such as brand and last four digits), never your full card number.
3. How we use information
- To provide the Service: calculate your Anvil Score and value range, keep connected data in sync, show your dashboard, and produce your reports.
- To run your account: sign-in emails, billing, and messages about your account or changes to the Service.
- To support you when you ask for help, including looking at your data with your permission to answer a question.
- To keep the Service secure: detect abuse, prevent fraud, and investigate problems.
- To improve the Service: using de-identified, aggregated data to build industry benchmarks and to check how well our estimates match real outcomes. De-identified data does not identify you, your business, or any person.
- To meet legal obligations and enforce our Terms.
4. What we never do
- We do not sell or rent your information, including data from QuickBooks or other connected software.
- We do not share your data with buyers, brokers, lenders, or marketers unless you tell us to.
- We do not use data from connected software for advertising, and we do not show ads in the Service.
- We do not use your connected data for any purpose other than the ones in this policy.
6. Your connected accounts
Connection credentials and access tokens are stored encrypted in a dedicated secrets vault, separate from the rest of your data, and are used only by the service that pulls your data. Each business's data is walled off from every other business at the database level.
You can disconnect QuickBooks at any time from your Intuit account (in QuickBooks, the list of connected apps), or by emailing support@anvilscore.com. After you disconnect, we stop pulling new data. Scores and figures already calculated from it stay in your account so your score history keeps working, until you ask us to delete them or close your account.
7. How long we keep information
We keep your information while your account is open. When you ask us to delete your data or close your account, we delete it, or de-identify it, within 30 days. Copies in encrypted backups are removed as those backups expire, within 90 days. We keep limited records longer only where the law requires it, such as billing and tax records.
8. How we protect information
We encrypt data in transit (TLS) and at rest, restrict each workspace to its own data with database access rules, limit staff access to what is needed to run and support the Service, and limit the service that pulls your data to calling only the outside services it needs. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.
9. Your choices and rights
You can:
- see and correct your account details and business answers in the app;
- ask for a copy of the data we hold about you or your business;
- ask us to delete your data or close your account;
- disconnect any connected software at any time.
Depending on where you live, you may have additional rights under privacy laws such as those of California and other US states, including rights to know, delete, and correct personal information, and not to be discriminated against for using them. We honor these requests for all users. Email support@anvilscore.com from the address on your account and we will respond within 30 days. We may need to confirm your identity first.
10. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
11. Where data is stored
We store and process data in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.
12. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is material, we will tell you by email or in the app before it takes effect.
13. Contact us
Questions or requests about your privacy? Email support@anvilscore.com.