Subprocessors

All requests to the application pass through Vercel, including any data in transit. Uploaded files are stored in Vercel Blob storage.

All application data at rest: account details, business records, ledger entries, and payroll records.

Your organization name and an internal account identifier. Card details are entered on Stripe's own hosted checkout and never reach our servers.

Active when you subscribe to a paid plan.

Recipient name and email address, and the contents of the message — which may include an invoice number, amount, and an attached invoice PDF.

Active when you send an invoice or enable payment reminders.

Bank login credentials are entered directly with Plaid and are never visible to us. We receive transaction dates, amounts, and descriptions, plus the institution name and last four digits of the account.

Active only if you choose to connect a bank account.

When you use an AI feature: a bank transaction's description and amount for category suggestions, or summary financial totals for reporting questions. Requests are processed under our API agreement with Google, which does not permit training on the data. If you connect your own AI provider key instead, requests go to your provider and Google receives nothing.

Active only when you use an AI feature without connecting your own provider key.

Standard web analytics for the public pages only — pages viewed, approximate location from a truncated IP, browser and referrer. It is not loaded once you sign in: no page inside your books is measured, so no company name, document, customer or balance ever reaches it.

Public marketing pages only; never inside the application.

Technical error reports: stack traces, browser and request metadata. Payloads are filtered to remove credentials and secret-shaped values before transmission.

Active when error monitoring is enabled.