Privacy Policy

Last updated: September 16, 2026

Placeholder legal text. This page is a good-faith draft, not final legal advice. Replace it with copy reviewed by a qualified attorney before relying on it commercially.

1. What We Collect

  • Account information: name, email, password (hashed by our authentication provider).
  • Business information you provide: business name, type, industry, and timezone.
  • Financial data: transactions, balances, and account details from banks you connect via Plaid, or data you upload via CSV or manual entry.
  • Receipts you upload, including any images and extracted data.
  • Employee time-clock and payroll information, if you use those features: clock-in/clock-out times, breaks, and pay rates entered for hourly pay calculations.
  • Usage and security data: login timestamps, IP addresses, and device information, used to protect your account.

2. How We Use It

We use your data to provide the Service: to display your transactions and reports, to categorize transactions (including with AI assistance), to process payments, and to detect and respond to security issues. We do not sell your data.

3. Data Isolation

Every business's financial data is isolated at the database level using row-level security — one business can never read another business's transactions, receipts, or accounts.

4. Third Parties

  • Vercel — hosting for the website and application, and Vercel Analytics for anonymized page-view analytics.
  • Supabase — database, authentication, and file storage.
  • Plaid — bank account connections. We never see or store your bank login credentials; Plaid handles that connection directly.
  • Stripe — payment processing. We never see or store your full card number.
  • Anthropic (optional) — if enabled, transaction details (merchant name, description, and amount) may be sent for AI-assisted categorization, and receipt images may be sent for AI-assisted data extraction.

5. Data Retention & Deletion

We retain your data while your account is active. You may request account and data deletion by contacting support@mybookkeepingmachine.com.

6. Security

We use encryption in transit, database-level access controls, rate limiting, audit logging, and continuous monitoring for suspicious activity. See our security practices for more detail.

7. Contact

Questions about this policy: support@mybookkeepingmachine.com.