Privacy Policy — Investments

This policy covers the CEO Hero client application (investments.ceohero.com and the CEO Hero iOS app), operated by CEO Hero. In it you can connect your business bank accounts so we can deliver bookkeeping and financial reporting, and your social media and advertising accounts so we can publish content for you and report on your marketing. It sits alongside CEO Hero's general privacy policy and takes precedence for anything concerning bank, social media or advertising data.

1. Bank data we collect

When you connect an account, we retrieve from your financial institution through Plaid:

• Transaction date, description, merchant name and amount
• Account name, type and last four digits
• Current and available balances
• The institution's name

We retrieve up to 24 months of history when you first connect, and new transactions afterwards.

2. What we never receive

Your bank username and password are never seen, transmitted or stored by this application. You enter them inside Plaid's own secure window, which communicates directly with your bank. We receive only an access token that permits reading the data listed above. We cannot move money, initiate payments, or make any change to your accounts — the access is read-only.

3. How we use it

• To categorise your income and expenses as part of your bookkeeping
• To produce your reporting: revenue by month, spending by vendor, cash position and profitability
• To answer your questions about your own figures

We do not use your data for lending, credit or underwriting decisions, for marketing, for training machine-learning models, or for any purpose other than delivering your bookkeeping service.

4. Social media and advertising accounts

You can connect Facebook Pages, Instagram professional accounts, Threads, Google Business Profile, YouTube, LinkedIn, TikTok, Pinterest and Bluesky, and your Meta (Facebook & Instagram) and Google Ads accounts. Each connection is made by you, signing in on that platform's own page and approving the specific permissions listed there. Bluesky connects with an app password you create in Bluesky, which you can revoke there at any time.

What we receive and store

• An access token (and, where the platform issues one, a refresh token) for each account you approve — encrypted at rest with AES-256 and never sent to your browser or phone
• The account's id, name, handle and profile picture, so you can recognise it
• Performance numbers the platform provides for that account: followers, reach, views, impressions, engagement, clicks, calls, direction requests, reviews count and rating, and for ad accounts spend, results and their breakdowns (age, gender, placement, device, region, search terms, keywords)
• Your recent posts' text, links, thumbnails and their like/comment/share/view counts
• The posts you create in the app, the photos and videos you attach, and each platform's result (post id and link, or the error)

How we use it — only to (1) publish the posts you or your authorised CEO Hero team member create and approve, to the accounts you select, at the time you choose; (2) show you your accounts' and ads' performance; and (3) tell you when a connection has stopped working so you can reconnect it. We do not read or store your private messages, we do not post anything you have not created or approved in the app, we do not sell this data, and we do not use it for advertising profiles or to train machine-learning models.

Platform-specific terms

• Google (Business Profile, YouTube, Google Ads). CEO Hero's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• YouTube. This app uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service; Google's handling of your data is described in the Google Privacy Policy. You can revoke our access at any time at Google security settings.
• Meta (Facebook, Instagram, Threads). Data received through Meta's platform is used only as described here and in line with the Meta Platform Terms. You can remove our access in Facebook Settings → Business Integrations, or Instagram/Threads Settings → Apps and websites.
• TikTok, LinkedIn, Pinterest. Used only for posting and reporting as described above, under each platform's developer terms. You can revoke access in each platform's app/permission settings.

Disconnecting and deletion. Tap Remove on any account in Settings → Connections: we immediately delete its stored tokens and profile details. See Data deletion for the full process, including deleting everything we hold from your social and ad accounts.

5. Who can see your data

Every client organisation on this application is a separate, walled-off sub-account. Within yours:

• Accounts routed as business are visible to the people your organisation has authorised on this application, and to the CEO Hero team members who deliver your bookkeeping service.
• Accounts routed as personal are visible only to the individual who connected them — not to your colleagues, and not to CEO Hero administrators. There is no override.
• Other CEO Hero clients can never see your data, and you can never see theirs. Access is enforced on the server for every request, not merely hidden in the interface.

6. Consent

We record your explicit consent before any bank connection can begin. The wording you agreed to, and the date, are stored so both of us have a record. You can withdraw consent at any time in the application, which immediately prevents any new account being connected.

7. Who we share it with

We do not sell your data, and we do not share it for advertising. It is handled only by the providers required to run the service:

We will disclose data if legally compelled, and will tell you unless prohibited from doing so.

8. Security

• Encrypted in transit (TLS 1.3) and at rest
• Two-factor authentication on accounts with access to bank data
• Access tokens held server-side only, never sent to your browser
• Every access to financial data recorded in an audit log

9. How long we keep it

While you are a client, and for up to seven years afterwards where required for accounting records. Where you request deletion and no legal obligation requires us to keep it, we delete it on request instead.

10. Your rights

• Disconnect any bank at any time, in the application.
• Deletion — we revoke the connection at Plaid and delete your stored transactions and balances. Actioned within 30 days, normally the same day.
• Social and ad accounts — tap Remove in Settings → Connections to delete that account's tokens at once, or follow Data deletion to erase everything.
• Access — request a copy of what we hold about you.
• Correction — ask us to fix anything inaccurate.

When you delete, we retain only the record that consent was given and later revoked. That contains no transaction data, and exists so we can demonstrate we handled your data lawfully.

11. Changes

If we change how bank data is used, we will ask for your consent again rather than relying on the consent you gave to earlier wording.

12. Contact

Questions, access requests or deletion requests: support@ceohero.com.