Privacy Policy
Effective date: August 6, 2026
1. Who we are
This Privacy Policy explains how [Your Company Legal Name, e.g. EOM Books, LLC]("EOM Books," "we," "us," or "our") collects, uses, and shares information when you use our small-business accounting software (the "Service"). By using the Service, you agree to the collection and use of information as described here.
2. Information we collect
Account information. Name, email address, and password (stored as a salted hash, never in plain text) when you sign up.
Business information. Your organization's name, and any data you enter into the Service — customers, vendors, invoices, bills, journal entries, employees, and other bookkeeping records.
Bank connection data. If you connect a bank or credit card account through Plaid, we receive account and transaction data (balances, transaction descriptions, amounts, and merchant names) from your financial institution via Plaid. Plaid access credentials are encrypted at rest; we do not store your online banking username or password, which you enter directly with Plaid, not with us.
Payroll data (if enabled). If you use payroll features, employee information you enter (name, compensation, employment type) is stored by us; if payroll is processed through a third-party payroll partner, sensitive data such as Social Security numbers and bank account numbers for direct deposit are collected directly by that partner through their own hosted onboarding flow and are not stored on our servers.
Usage data. Log data, device/browser information, and how you interact with the Service, collected automatically.
3. How we use information
- To provide, maintain, and improve the Service (e.g., generating your financial reports, syncing bank transactions)
- To communicate with you about your account or the Service
- To detect, prevent, and address fraud, abuse, or security issues
- To comply with legal obligations
- If you enable optional AI-assisted transaction categorization, transaction descriptions and amounts may be sent to our AI provider (Anthropic) solely to suggest a bookkeeping category — this feature is off by default and only activates if separately configured
4. How we share information
We do not sell your personal or financial information. We share information only with:
- Service providers who help us operate the Service, including Plaid (bank connections), our hosting and database providers, our transactional email provider, and — if you enable it — our AI provider for categorization suggestions
- A payroll processing partner, if and when you enable payroll features that require it
- Legal or regulatory authorities, where required by law or to protect our rights
- A successor entity, in the event of a merger, acquisition, or sale of assets
5. Data security
We use industry-standard safeguards to protect your data, including encryption of bank access tokens at rest (AES-256-GCM), encrypted connections (TLS) in transit, and role-based access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. Financial records may be retained longer to meet standard accounting/tax record-keeping practices, even after account closure, unless you request deletion and we are not otherwise required to retain the data.
7. Your rights and choices
You can access, export, or request correction of your data at any time through the Service. You may request deletion of your account and associated data by contacting us at [privacy@yourdomain.com], subject to our legal and legitimate business obligations to retain certain records.
8. Children's privacy
The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, for material changes, provide additional notice.
10. Contact us
Questions about this Privacy Policy? Contact us at [privacy@yourdomain.com] or write to us at [Company mailing address]. This policy is governed by the laws of [State, e.g. Delaware], without regard to conflict-of-law principles.