Privacy Policy

1. What we collect

When you create an account we collect your name, your email address and the language you prefer to read in. Your password is stored only as a hash — a one-way scramble — so nobody at bbooks can read it, ourselves included.

Everything you enter into your books is data we hold on your behalf: your customers and vendors, your invoices and bills, your transactions and journal entries, and any file you attach to them. If you use payroll, that includes records about your employees and contractors — names, addresses, pay rates and government identification numbers. Identification numbers are encrypted before they are written to the database, and are shown back to you only as the last four digits.

If you connect a bank account, we receive the account and transaction details your bank releases through our banking provider; your bank login stays with them and never reaches us. If you subscribe, we receive your billing contact details and the result of each payment from our payment processor. We never see or store your full card number.

2. What we use it for

We use your information to run the service: to keep your books and produce your reports, to send the emails the product has to send — invitations, password resets and notices about your account — to take payment for your subscription, and to answer you when you ask us for help.

We do not sell your information and we do not share it with advertisers. We do not use your accounting records to build a profile of you or to train anything. We look inside an individual organization's data only when you ask us to help, or when we have to in order to fix a fault or investigate abuse of the service.

3. The companies that handle data for us

We do not run our own data centres and we do not send our own email. The companies below handle a part of the service on our behalf, and each of them receives only the data that part needs.

Neon runs the database that holds your books. Vercel hosts the application and stores the files you attach to transactions and to payroll records. Stripe processes subscription payments and is the company that holds your card details. Plaid connects your bank accounts and delivers the transactions we import. Resend delivers the emails the product sends you. Inngest schedules and retries the background jobs that keep bank imports and recurring entries moving. Sentry receives error reports and technical stack traces when faults occur so we can diagnose them; our configuration disables default personal data collection and error reports send diagnostic tags without user profiles or accounting records.

That is the whole list. There is no analytics provider, no advertising network and no session-recording tool in bbooks, so there is none in this policy either — and if that ever changes, this section changes with it.

4. How long we keep it

Your records stay in the service for as long as your organization does. A lapsed subscription deletes nothing: as our Terms of Service explain, a module that is no longer on your plan stops accepting new entries, while everything already recorded stays readable and exportable.

If you want an organization and its records removed, write to the address below and we will remove them. Deletion is permanent and we cannot undo it. Copies may persist for a short time in backups and in our providers' operational logs before they age out, and we keep what the law requires us to keep.

5. Your choices about your information

Most of it you can reach yourself. Your account details are on your profile page, where you can correct them. Your organization's records export to CSV, Excel and PDF from inside the application, which is also how you take a portable copy with you. For anything you cannot reach on your own, write to us and we will do it for you.

We offer four things to every user, wherever you live: access to a copy of the personal information we hold about you, correction of anything that is wrong, deletion of your account and of your organization's records, and a copy of your data in a portable, machine-readable format. Some countries and some states grant their residents these rights by law. Rather than work out which of them apply to you, we offer them to everyone.

We do not sell personal information, so there is nothing for you to opt out of. When you ask us to act on your data we will answer you, and we will never treat you worse for having asked.

6. How your data is protected

Every organization's data is separated inside the database itself. Each row records the organization it belongs to, and the database refuses to return or change a row for a session that belongs to a different organization — the separation does not depend on the application remembering to ask correctly. Within your organization, who can see what is decided by the role you assigned them.

Connections to bbooks are encrypted in transit, and browsers are instructed to refuse an unencrypted one. Passwords are stored as hashes. Bank connection tokens and government identification numbers are encrypted before they are stored, with keys the database itself does not hold.

We hold no security certification and we make no claim to one. No service is perfectly secure, and we would rather tell you that plainly than imply otherwise.

7. Cookies

bbooks uses two kinds of cookie: one that keeps you signed in, and one that remembers whether you are reading in English or in Spanish. Both are necessary for the service to work, which is why you are not asked to consent to them.

There is no analytics cookie, no advertising cookie and no third-party tracker on this site. Stripe and Plaid set their own cookies inside the payment and bank-connection windows they run; those windows belong to them, and their own privacy policies govern them.

8. Children

bbooks is a tool for running a business and is not directed at children. We do not knowingly collect personal information from anyone under sixteen, and we have no feature intended for them. If you believe a child has given us information, write to the address below and we will delete it.

9. Where your data is processed

bbooks is operated from the United States by Ascension Wealth Strategies LLC, and the companies listed above process data on infrastructure they operate, which may sit in more than one country. If you use bbooks from outside the United States, your information will be transferred to and processed in the United States, and possibly elsewhere. We would rather say that plainly than promise you a border your data does not respect.

10. How to reach us

For anything in this policy — a question, a request to see, correct, export or delete your information, or a concern about how we handled it — write to contact@ascensionwealthstrategiesllc.com. A person reads that address and will answer you. If you ask us to act on someone's data, we may first need to confirm who you are, so that we do not hand one person's records to another.

11. Changes to this policy

We will update this policy as the product changes — a new company in the list above, or a change in what we collect and why. When we do, we update the effective date shown at the top of this page.

If a change materially affects your rights, we will tell the administrators of each organization by email before it takes effect. If you keep using bbooks after that, you accept the updated policy.