Privacy Policy

Last updated: January 1, 2026

What we collect

We collect information you provide directly:

  • Email address (for login and notifications)
  • Business name, country, and currency preferences
  • Financial transaction data you upload or connect via bank feeds
  • Payment information (processed by Stripe — we never see your card number)

We collect limited technical data automatically:

  • IP address (stored with auth events, not linked to financial data)
  • Browser user agent (for security logging)
  • Error and performance telemetry via Sentry (financial descriptions are scrubbed)

How we use your data

  • To provide the bookkeeping service and generate financial statements
  • To send transactional emails (OTP codes, import notifications, billing alerts)
  • To improve AI categorization accuracy (your corrections train the workspace memory, not a shared model)
  • To detect fraud and prevent abuse

We do not sell your financial data. We do not use your financial data to train shared AI models outside your workspace.

Data sharing

We share data only with the subprocessors listed on our Security page, and only to the extent necessary to provide the Service. We may disclose information if required by law.

Data retention

Your data is retained while your account is active. After workspace deletion (30-day soft delete, then purge), all workspace data is deleted from production databases within 30 days and from backups within 90 days. Your personal account data is retained until you request deletion.

Your rights

  • Export: Download all your data at any time from Settings › Export
  • Deletion: Delete your workspace or account from Settings. We process deletion requests within 30 days.
  • Correction: Update your profile information from Settings › General
  • Portability: Your data export is in standard CSV format

EU and UK residents have additional rights under GDPR/UK GDPR. Contact privacy@bookkipa.com to exercise these rights.

Cookies

We use one session cookie (bk_session) for authentication. It is HTTP-only, Secure, and SameSite=Lax. We do not use tracking, advertising, or analytics cookies.

Contact

Privacy questions: privacy@bookkipa.com