PayBooks ("we," "us," or "our") operates the mobile and web application located at paybooks.app (the "Service"). We are committed to protecting your privacy and managing your financial and personal data securely and transparently.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using PayBooks, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect information necessary to provide financial reports, document management, and other features.
A. Personal Information You Provide
- Account Information: Name, email address, phone number, and account credentials, ...
- Business & Billing Details: Business profile information, tax details, item/product details, customer information, and document records.
B. Financial Data via Plaid Integration
To provide account aggregation and financial tracking, PayBooks integrates with Plaid Inc.
- When you link a financial account, Plaid collects financial data such as transaction histories, account balances, and account metadata.
- Security & Credentials: PayBooks never stores or has direct access to your online banking username or password. Bank authentication is handled directly and securely through Plaid.
- We store Plaid access tokens and Item IDs to maintain secure API connections.
C. Payment and Subscription Information
- Subscriptions and billing are processed through Stripe, Google Play. PayBooks does not collect or store credit card numbers directly. Payment details are securely handled by Stripe under their privacy standards.
D. Automatically Collected & Technical Information
- Usage Data: Application interaction logs, device type, operating system version, and IP address for security and diagnostic purposes.
2. How We Use Your Information
We use the collected information for the following purposes:
- Core Service Functionality: To display account balances, aggregate transactions, generate business documents (invoices/estimates), and track business finances.
- Customer Support & Communication: To send transactional emails (e.g., account verification, invoice notifications) and respond to inquiries.
- Security & Fraud Prevention: To verify user identities, maintain platform integrity, monitor system activity, and prevent unauthorized access.
3. Data Sharing and Disclosure
PayBooks does not sell, rent, or trade consumer personal or financial data to third parties under any circumstances.
We only share data with third-party service providers essential to running our application:
- Plaid Inc.: For retrieving financial account data with your explicit consent.
- Stripe Inc.: For processing payments and managing recurring billing.
- Hosting & Infrastructure Providers: For encrypted database storage, app hosting, and backend processing.
- Legal Requirements: We may disclose data if required by applicable laws, court orders, or governmental regulations.
4. Data Security
We enforce industry-standard technical and administrative safeguards to protect your personal and financial data:
- Encryption in Transit: All traffic between your app/browser, our servers, and third-party APIs is encrypted using TLS 1.2 or higher.
- Encryption at Rest: Sensitive tokens and personal data stored in our databases are protected with AES-256 encryption.
- Access Control: Production databases and administrative systems strictly follow the Principle of Least Privilege and require Multi-Factor Authentication (MFA).
- Network Isolation: Production components are deployed in segmented, secure cloud environments with no public access to internal database servers.
5. Data Retention & Deletion Policy
We practice Data Minimization—retaining your information only as long as necessary to provide you with the Service.
- Active User Account Data: Retained for the duration of an active account to operate core app features.
- System & Troubleshooting Logs: Retained for up to 90 Days for operational monitoring and security auditing.
- Deleted Account Data: Retained for a maximum of 30 Days as a grace period prior to final cryptographic erasure.
You may delete your account at any time by contacting us at contact@paybooks.app.
6. Your Data Rights & Choices
Depending on your jurisdiction, you have rights regarding your personal information, including:
- Requesting a copy of the personal data held by PayBooks.
- Requesting updates to inaccurate or incomplete information.
- Requesting the deletion of your account and associated financial links.
- Disconnecting financial accounts at any time through the app or directly through Plaid's user portal.
7. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any updates will be posted on this page with an updated "Last Updated" date. Continued use of the Service following posted updates constitutes acceptance of the modified policy.
8. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at contact@paybooks.app.
