Security & data protection

The Almanac reads a report.
Your data stays private.

The Almanac runs off a sales report your CRM emails on a schedule. It never connects to your bank, never touches your bids, and can never move a dollar. Here is exactly how your data is protected.

The short version: The Almanac runs off a sales report your CRM emails on a schedule. There is no bank connection, no Plaid, and no developer. The Almanac reads the file, computes your numbers, and stops there. Every connection is read-only, so it can never change anything in your CRM or move a dollar. Everything we store is encrypted, used only to compute your numbers, and deleted whenever you ask.

Your CRM emails a report. That's the whole connection.

Your CRM already runs reports. You point one recurring report at a dedicated The Almanac inbox: your sales history, one row per paying service line, with customer, service, date, amount, and ZIP. No API, no integration, no login handed over. The Almanac reads the file automatically every time it lands.

What The Almanac receives: the rows in that report, and nothing else. There is no path to your bank, your ad accounts, or your bids. It reads sales history you chose to send, computes your numbers, and that is the full list.

Read-only, by design.

The Almanac can see the report you send and take no action anywhere. It cannot spend, bid, place an order, or move money, and it never connects to your bank. It reads, it recommends a number, you decide.

Stop sending the scheduled report and the feed simply stops. You are in control of what The Almanac ever sees, and you can have your data deleted whenever you ask.


🔐

Encrypted at rest

The sales data The Almanac reads is stored using AES-256-GCM encryption, the same standard used by banks. Encryption keys are held separately in a secure environment, not in the database. Accessing the database alone gets an attacker nothing usable.

🔒

Encrypted in transit, always

All data between your browser and Ando's servers travels over TLS (HTTPS) with modern cipher suites. This is enforced automatically by Vercel, which hosts the application. There is no plain-text path for your data.

🏠

Your data is yours, isolated

Each customer's data is isolated using Row-Level Security at the database layer. One Ando user cannot access another user's data, even in the event of an application bug. Access control is enforced at the database, not just the application.

🚫

No data selling, ever

Your data is used for one purpose: computing your own numbers. We do not sell it, share it with advertisers, or pass it to third parties. We make money from your subscription, not from your data, and we delete it whenever you ask.


The Forecast is the one part that connects a bank, read-only.

The Almanac never touches your bank. The optional finance add-on, The Forecast, does connect your bank and QuickBooks, and only to read them. It uses Plaid, the same secure link used by Intuit, Robinhood, and thousands of financial apps, so your bank login is entered inside Plaid's own interface and never touches Ando's servers. Plaid holds SOC 2 Type II certification.

QuickBooks uses Intuit's own OAuth: your Intuit password never leaves Intuit, and Ando receives a limited-scope, read-only token for your P&L, balance sheet, and A/R aging. Because access is read-only, no money can be moved, and you can revoke it anytime from your Settings page or from my.plaid.com.


Does The Almanac connect to my bank?

No. The Almanac runs off your CRM, not your bank. There is no Plaid and no bank login. Your CRM emails a scheduled sales report, and that is the whole connection. The only part of Ando that connects a bank is the optional The Forecast add-on, and that connection is read-only.

Can The Almanac spend money, move money, or change my bids?

No. The Almanac reads a report and recommends a number. It cannot spend, bid, place an order, or move a dollar, and it never connects an ad account. It reads, it recommends, you decide.

Can The Almanac change anything in my CRM?

No. The connection is one direction only: your CRM emails a report to The Almanac. The Almanac has no login to your CRM and no way to create, edit, or delete anything in it. It reads the file you send and nothing more.

What happens to my data if I stop or cancel?

Stop sending the scheduled report and the feed stops. Your data is deleted whenever you ask, and canceling your account removes it from our systems. It is used only to compute your numbers while you are a customer.

Who can see my data?

You, and Ando's system when computing your numbers. Frank Andolina (founder) has admin access and may review data to troubleshoot or improve the product. We will never share your data with other businesses, competitors, or advertisers.

Is The Forecast bank connection safe?

Yes. The Forecast is the optional finance add-on, and its bank and QuickBooks connections are read-only. You enter bank credentials inside Plaid's own interface, so they never touch Ando's servers, and read-only access means no money can be moved. You can revoke it anytime. The Almanac itself never connects a bank.

What if I have more questions or a security concern?

Email [email protected] directly. Security concerns get a same-day response.


See what your customers are worth.

The Almanac runs off your CRM's own history, no bank connection required. Private beta with select pest control operators.