Privacy Policy
Last updated: October 2026
What we collect
Account details (name, email, hashed password), the business data you enter (customers, invoices, expenses), and the operational records needed to run and secure the service, such as sign-in times and the audit log of changes to your books.
What we never do
We do not sell your data. We do not read your financial documents except to provide support at your request or to investigate a technical issue.
Third parties
We use a hosting provider and a managed database. When the matching features are enabled we also use Stripe for online payments, an email provider to deliver the messages you send, and an AI provider for the assistant and receipt scanning. Each processes data solely on our instructions under their own security terms.
Your rights
You can view and correct your data in the app, and export your ledger and audit log from Settings. To have something corrected that you can't change yourself, or to have your workspace and its data deleted, contact us. Deletion requests are completed within 30 days.
Security
Passwords are bcrypt-hashed; sessions are signed JWTs; all traffic runs over TLS; every financial action is recorded in an append-only audit log.