Privacy Policy
Last updated: December 3, 2025
Privacy at a Glance
- We collect only what we need to provide our bookkeeping service
- Your financial data is encrypted and never sold to third parties
- You can export or delete your data at any time
- We use industry-standard security practices
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted, we cannot see it)
- Account preferences and settings
Financial Data
To provide our bookkeeping service, we process:
- Transaction data from CSV uploads (date, amount, description, payee)
- Bank account information via Plaid (read-only access, Pro plan only)
- Receipt images and extracted data (vendor, amount, date)
- Categories and rules you create
- Mileage trip records
Usage Data
We automatically collect:
- Device information (browser type, operating system)
- IP address
- Pages visited and features used
- Error logs for debugging
2. How We Use Your Information
We use your data to:
- Provide the service: Import transactions, categorize expenses, generate reports
- Improve categorization: Train our rules engine based on your corrections
- Send notifications: Weekly digests, trial reminders, payment confirmations
- Provide support: Respond to your questions and troubleshoot issues
- Ensure security: Detect fraud and prevent unauthorized access
- Comply with law: Meet legal obligations and respond to lawful requests
We do NOT: Sell your data, share it with advertisers, or use it for purposes unrelated to providing our service.
3. Third-Party Services
We use trusted third-party services to operate TuduBooks:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & Authentication | All account and transaction data |
| Stripe | Payment Processing | Email, subscription status |
| Plaid | Bank Connection (Pro only) | Bank credentials (encrypted) |
| Resend | Email Delivery | Email address, message content |
| PostHog | Analytics | Usage events (anonymized) |
| Vercel | Hosting | Server logs, IP addresses |
Each service has their own privacy policy. We encourage you to review them.
4. Data Security
We implement industry-standard security measures:
- Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Authentication: Secure JWT tokens with automatic expiration
- Access Control: Row-level security ensures you only see your own data
- Rate Limiting: Protection against brute force attacks
- CSRF Protection: Prevention of cross-site request forgery
- Audit Logging: All data changes are logged for security review
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Transactions & Categories | Until you delete them or close your account |
| Receipt Images | Until you delete them or close your account |
| Audit Logs | 365 days (automatically deleted) |
| Account Data | 30 days after account deletion (recovery period) |
6. Your Rights
You have the right to:
For California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information. We do not sell your personal information.
For EU/UK Residents (GDPR)
If you are in the European Union or United Kingdom, you have rights under GDPR including data portability, the right to be forgotten, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is contract performance (providing the service you signed up for) and legitimate interests (improving our service).
7. Cookies
We use cookies for:
- Essential cookies: Authentication, session management, CSRF protection
- Analytics cookies: Understanding how you use our service (PostHog)
You can disable cookies in your browser settings, but some features may not work correctly.
8. Children's Privacy
TuduBooks is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of TuduBooks after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, contact us at: