Privacy Policy
Last updated: July 3, 2026
Listero ("Listero", "we", "us") is an AI-assisted bookkeeping tool for solo creative businesses, operated by Viola Visuals LLC. This policy explains what data we collect, how we use it, who we share it with, and the choices you have. The short version: we collect your transaction data to categorize it for you, we never sell your data, and you can export or delete everything at any time.
What we collect
Account information: your name, email address, and business profile (business name, industry, location), provided at signup.
Financial transaction data: when you connect a bank or card through Plaid, we receive read-only transaction information — merchant names, amounts, dates, account names/last-four digits, and related metadata such as merchant location and Plaid's category signals. We receive an access token from Plaid; we never see or store your bank username or password — those are entered directly with Plaid. If you upload a CSV statement, we collect the transaction rows it contains.
Slack information: if you install our Slack app, we store your Slack workspace ID, your Slack user ID, and a bot token so we can send you transaction notifications. If you reply to a Listero message in its thread, we process that reply to act on your instruction. We do not read your other Slack messages or channels.
Usage data: product events such as when a categorization completed, when a notification was sent, and which buttons you tap — used to improve accuracy and the product.
How we use it
To run the service you signed up for: importing your transactions, proposing categorizations with plain-English reasoning, notifying you, recording your confirmations, learning your personal vendor rules, and producing summaries and exports. We also use aggregated, de-identified usage statistics to improve the product. We do not sell your personal information, and we do not use your data for advertising.
AI processing
Listero uses Anthropic's Claude models to propose transaction categories and to interpret your natural-language replies. To do this, relevant transaction details (merchant, amount, date, account classification, location metadata) and your business profile are sent to Anthropic's API for processing. Per Anthropic's commercial API terms, this data is not used to train their models. AI-generated categorizations and explanations are proposals for your review — they can be wrong, and they are not tax, legal, or financial advice (see our Terms of Service).
Service providers we share data with
We use a small set of processors, each only to the extent needed to provide the service: Plaid (bank connectivity — see Plaid's own end-user privacy policy), Anthropic (AI categorization), Slack (notifications you opted into), Clerk (sign-in and authentication), Supabase (database hosting), and Vercel (application hosting). We do not share your data with anyone else except as required by law.
Security
Bank access tokens and Slack tokens are encrypted at rest (AES-256-GCM). All data is encrypted in transit (TLS). Database access is protected by row-level security so each user's data is isolated to their account. Bank connections are read-only — Listero cannot move money, and the credentials we hold could not be used to move money. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you promptly.
Your rights and choices
Export: download everything we hold about you, anytime, from Settings → "Export all my data". Disconnect: remove bank connections from Settings, or revoke Listero from your bank or Slack workspace directly. Delete: email us (address below) and we will delete your account and associated data within 30 days, except records we must keep for legal compliance. Depending on your state (e.g., California residents under the CCPA), you may have additional rights to access, correct, or delete personal information — contact us to exercise them; we honor such requests for all users regardless of state.
Data retention
We keep your data while your account is active so the service can work. Archived transactions remain yours and exportable. After account deletion, backups age out within 30 days.
Children
Listero is a business tool and not directed at anyone under 18.
Changes
If we make material changes to this policy, we will notify you by email or in-app before they take effect.
Contact
Questions or requests: grant@orangegrovesocial.com