Bank connections
We use Plaid to connect business bank accounts. You sign in through Plaid's secure flow, or directly with your bank where it offers that. Your login details go to your bank, not to Draft. We never see or store your banking username or password, and we'll never ask you to send them to us.
Plaid's handling of the information it collects is described in the Plaid End User Privacy Policy.
Sales and accounting connections
We use Rutter to connect store, marketplace, payment and accounting platforms such as Shopify, Amazon and QuickBooks. You approve each connection on the platform itself, and we never receive your password for it. Rutter's handling of information is described in its privacy notice.
What we can see
Bank connections are read-only. We can see the information you authorise, such as account details, balances, transactions, statements and the account holder's name and contact details. We can't move money, make payments or change anything in your bank accounts through a connection.
Some sales and accounting platforms grant broader permissions than we need. Draft only reads information from them. We don't create, change or delete your orders, invoices, bills or other records.
We ask only for what's relevant to assessing and managing financing. Our Privacy Notice lists the information, why we use it and how long we keep it.
How we protect it
Information is encrypted in transit, held in access-controlled systems and available only to the people who need it to assess or manage financing. We don't sell business or personal information, and we don't share it for anyone else's marketing.
Staying in control
You decide which accounts to connect, and you can disconnect any of them at any time:
- Bank accounts: through Plaid Portal or your bank's connected-apps settings.
- QuickBooks and other accounting platforms: through the platform's connected or authorised apps settings.
- Stores and marketplaces: by removing or uninstalling the connected app in the platform's settings.
- Any connection: by emailing fergus@arbourvilla.ie, and we'll remove it for you.
Disconnecting stops new information reaching us. It doesn't change an agreement already signed. Information we've already received is kept or deleted as our Privacy Notice explains. Our connection terms apply whenever you connect an account.
Reporting a concern
If you believe you've found a security issue affecting Draft, please email fergus@arbourvilla.ie with enough detail for us to reproduce it. Please don't access other people's information or disrupt the service while investigating.