Legal

Privacy Policy

Effective September 6, 2026

Ressura, Inc. (“Ressura,” “we,” “us”), a Delaware corporation, provides financial audit and controls-monitoring software. This Privacy Policy explains how we handle personal information for our website and the Service.

Two roles. For our website and account/administrative data, Ressura is the controller. For the personal data contained in the content you submit to be analyzed (“Customer Data”), Ressura acts as a processor on your organization's behalf, and that processing is governed by our Data Processing Agreement (the “DPA”). Where the DPA and this Policy conflict for Customer Data, the DPA controls.

1. Information we collect

Account information — name, email, organization, role, and authentication details.
Billing information — plan, transaction records, and limited payment details processed by our payment processor (Stripe); we do not store full card numbers.
Customer Data you submit — invoices, contracts, transactions, ledgers, and related records (which may contain personal data such as names, addresses, and bank details of your suppliers, customers, or employees), plus any context or notes you enter.
Usage and technical data — log data, device/browser information, IP address, and product-interaction events.
Cookies and similar technologies — see Section 8.

2. How we use information

We use information to: provide, secure, maintain, and improve the Service; authenticate users and administer accounts; perform the analyses you request; process payments; provide support; send service and, where permitted, marketing communications (which you can opt out of); detect and prevent fraud and abuse; and comply with legal obligations.

3. AI processing and model training

Ressura uses automated and AI-based processing to analyze the content you submit. We do not use Customer Data to train our own or any third party's AI or machine-learning models. Where we use third-party AI subprocessors to perform analysis, they are contractually bound to process the data only to provide the service to us and not to train their models on it.

4. Google data

Google Sign-In provides basic account information used to authenticate you. Google Drive folders are accessed only after an authorized user explicitly shares a folder with the service account shown by Ressura, and are read on a read-only basis. Ressura's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. How we share information

We do not sell personal information. We share it only:

with service providers / subprocessors who process data on our behalf under contract (Section 7);
at your organization's direction, including with systems you connect;
for legal reasons (to comply with law or lawful requests, or to protect rights, safety, and security); and
in a business transfer (merger, acquisition, or asset sale), subject to this Policy.

6. Data retention

We retain personal information for as long as needed to provide the Service and for legitimate business, legal, security, and accounting purposes. Customer Data is retained per your instructions and the DPA; after termination you may export it for a limited period, after which we delete or de-identify it.

7. Subprocessors

We use vetted subprocessors in categories including: cloud hosting and infrastructure; payment processing; AI/model providers for document analysis; email and communications; and product analytics and error monitoring. Each is bound by contract to appropriate confidentiality and security obligations. We maintain a current subprocessor list and provide advance notice of material changes as described in the DPA. Request the current list at contact@ressura.com.

8. Cookies and similar technologies

We use strictly necessary cookies to run the site and keep you signed in, and (where enabled) functional and analytics cookies to understand and improve usage. We do not use cookies to sell your information. You can control cookies through your browser settings and, where offered, our cookie controls; blocking some cookies may affect functionality.

9. International data transfers

We are based in the United States and may process information there and in other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses.

10. Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls, and monitoring. See our Security Statement. No system is perfectly secure; report concerns to security@ressura.com.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent.

EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
California (CCPA/CPRA): the right to know, delete, and correct personal information, and to opt out of “sale” or “sharing” — we do not sell or share personal information as those terms are defined — with no discrimination for exercising your rights.

You may also disconnect integrations or stop sharing Google Drive folders at any time. To exercise rights, contact contact@ressura.com. If your personal data is part of Customer Data controlled by an organization, we will refer your request to that organization. We will verify requests and respond within the timeframes required by law.

12. Children's privacy

The Service is for businesses and is not directed to, or intended for use by, anyone under 18. We do not knowingly collect personal information from children.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.

14. Contact

Ressura, Inc., Boulder, CO
Privacy and general: contact@ressura.com · Security: security@ressura.com