1. Data we collect
We collect account information (name, email, password hash), business profile data, financial records you upload or sync, usage analytics, and third-party integration metadata (such as bank connection identifiers) to operate the service.
2. How we use data
We use data to provide bookkeeping automation, generate financial reports, improve product features, detect fraud, and comply with legal obligations.
3. AI processing
AI systems analyze your data to suggest categorizations, summaries, and forecasts. You can control AI preferences in the Settings area.
4. Sharing and subprocessors
We share data with vendors that provide infrastructure, payments, and AI processing. Subprocessors are required to meet contractual security standards.
5. Data retention
We retain data while your account is active and for a limited period after termination to comply with legal obligations and support data export requests.
6. Your rights
You may request access, correction, deletion, or export of your data subject to applicable law. Contact support to submit a request.
7. California privacy rights (CCPA/CPRA)
California residents have the right to know what personal information we collect, request deletion of personal information, opt-out of the sale or sharing of personal information (we do not sell your data), and not be discriminated against for exercising these rights. To exercise your rights, contact support with your request.
8. Financial data security
Financial data is encrypted in transit and at rest. We implement access controls, audit logging, and regular security assessments. Bank credentials are handled by third-party providers and are never stored on our servers. We comply with applicable data protection requirements under the Gramm-Leach-Bliley Act (GLBA) safeguards rule.
9. International transfers
Where required, we rely on standard contractual protections for cross-border transfers and store data in approved regions.
10. Changes
We may update this policy periodically. We will notify you of material changes and update the effective date above.