Privacy Policy.

Short version: Argus only collects what it needs to monitor your books. We don't sell your data. We don't share it with anyone except the people you invite. You can leave at any time and your data is purged.

1. Scope.

This policy describes how Argus Software Inc. ("Argus", "we", "us") handles personal information when you use the Argus product, the marketing website at argus.app, the Argus Excel add-in, or any related Argus services (collectively, the "Service").

It does not describe how the businesses you monitor with Argus handle their own data — that's between you and them.

2. What we collect.

Account information.

Name, email address, password (hashed with Argon2id), organization name, role within your organization, profile photo if you upload one. If you sign in with Google or Microsoft, we receive the basic profile information they share with us.

QuickBooks data, on your behalf.

When you connect a QuickBooks account, we receive the OAuth token Intuit gives us. With that token, we read the financial reports and transactions Argus needs to run health checks. Specifically:

• Profit & loss, balance sheet, AR aging, AP aging, general ledger detail
• Customers, vendors, accounts (chart of accounts), tax codes
• Transactions referenced by any active health check (invoices, bills, journal entries, payments, deposits)

We never receive QuickBooks login credentials. We do not have, and have never requested, OAuth scopes that allow us to write or modify data in QuickBooks.

Usage information.

Standard product analytics: pages viewed, features used, errors encountered, IP address, browser/OS, timestamps. We use this to improve the product, debug issues, and understand which features people use.

Communication.

Anything you send us via email, support chat, or the contact form on the website. We keep these for as long as is reasonable to support you.

3. Why we collect it.

Three reasons, in order:

• To run the product. We can't monitor your books without reading them. We can't show you a dashboard without storing the results of those checks.
• To improve the product. Aggregate usage information helps us figure out which checks are valuable, where people get stuck, and what to build next. This is always anonymized and never sold.
• To comply with the law. Tax records, invoicing, security incident logs, etc.

We do not collect personal information for any purpose not listed above. If we ever start, we'll update this policy and tell you.

4. How we use it.

To deliver the Service to you. To send transactional emails (account confirmations, security alerts, billing receipts). To send product updates if you've opted in. To respond to your questions. To detect and prevent fraud or abuse. To meet legal obligations.

We do not use your data to train external AI models. We do use anonymized aggregate patterns to tune Argus's internal anomaly heuristics — but those patterns are computed in-process and do not leave your dataset.

5. Who we share with.

By default, no one outside of Argus and the team you invite. Specifically:

• Your invitees. If you invite a bookkeeper, accountant, or teammate, they see the data you've granted them access to.
• Service providers. A small list of vendors who help us run the product: Microsoft Azure (hosting), Stripe (billing), Postmark (transactional email). Each is bound by a data-processing agreement that mirrors this policy.
• Legal compliance. If we receive a valid subpoena, court order, or government request, we comply. We will notify you unless legally prohibited from doing so.
• Mergers & acquisitions. If Argus is ever acquired, your data transfers under the same protections. You'll get notice with enough time to leave if you want to.

We do not sell, rent, or trade your personal information. Ever.

6. How long we keep it.

QuickBooks transaction snapshots: cached only as long as needed to render the dashboard, purged within 30 days of account disconnection. Health-check results: retained for the life of your subscription, then 90 days, then deleted. Account information: retained for the life of your account; 7-day delete on full account-deletion request. Logs: 90 days. Backups: 90 days, encrypted, in-region.

7. Your rights.

You can:

• Access the personal information we hold about you (download from your account settings, or by request)
• Correct it
• Delete your account and request a full data wipe (honored within 7 days)
• Disconnect QuickBooks at any time, which immediately stops fetching
• Export your health-check history at any time as JSON or CSV
• File a complaint with your local privacy regulator (in Canada, the Office of the Privacy Commissioner)

8. Cookies.

We use first-party cookies for authentication (your session) and a small handful of preference cookies (theme, last-visited dashboard view). We use one privacy-friendly analytics cookie (Plausible) to count visits to the marketing site. We do not use third-party advertising or tracking cookies anywhere in the product. See our Cookie Policy for the full list.

9. Changes.

If we change this policy in any meaningful way, we'll email you and post a notice on the site at least 30 days before it takes effect. We'll keep the old version archived so you can compare.

10. Contact.

Questions, concerns, or requests: privacy@argus.app. We commit to responding within 7 business days.

Argus Software Inc.
Toronto, Ontario, Canada