Privacy Policy
What we collect, why we collect it, who else can see it, and how to get it back or have it deleted. Written against what the software actually does, not against a template.
We do not track you, and there is nothing to opt out of
kBooks contains no analytics, no tag manager, no advertising pixel, no session replay and no third-party tracker of any kind. Nobody is watching you use it and nobody is buying a profile of you from us. The only cookies we set are the ones that keep you signed in, which is why you have never seen a consent banner here.
What we collect
Three things, and it is worth being precise about which is which.
What you tell us to open an account: your name, your email address, your business name and address, and a password we store only as a bcrypt hash. If you buy a paid plan, our payment processor collects and holds your card details. We never see or store a card number.
What you put into your books: your ledger, invoices, bills, customers, vendors, bank transactions, documents you upload, and anything else you enter. Some of this is personal data about other people, most obviously your own customers and employees. Where that is so, you are the one deciding what to collect and why, and we are handling it on your instructions. That relationship is what the data processing agreement sets out.
What the service records to run safely: sign-in attempts with their time and address, an audit record of who posted, edited or voided what, and ordinary server logs. This is how an account holder can answer “who changed this entry” and how we spot someone trying to break into an account.
Why we hold it
To run the service you asked for, to bill you, to keep the account secure, and to meet our own legal obligations. There is no fifth reason.
What we never do
We do not sell your data, rent it, share it for advertising, or use your books to train machine learning models. Not on the paid plans and not on the free one.
Who can see your books
The people you invited, at the level you gave them. On our side, access is limited to what is needed to operate and support the service, and support access to a customer’s books is asked for rather than assumed.
Bank data is its own subject
We never receive your bank login and the connection cannot move money. That has its own page because it deserves one.
Getting it back
One click produces your whole account: every ledger line as a spreadsheet, a QuickBooks file, and every document you filed. It works on a closed account too.
Getting it deleted
Ask and we delete it. The only things we keep are records we are legally required to keep, such as the invoices for what you paid us.
Who else touches it
Running kBooks means using other companies for hosting, storage and email. Every one of them is named, with what they do and what actually reaches them, on the subprocessors page. There are no others, and that list is part of the product rather than a document someone wrote once.
We will also disclose data if the law requires it. Where we are allowed to tell you that it happened, we will.
How long we keep it
When an account is closed we keep its books for 90 days and then delete them. That window exists so leaving is reversible and so you can still export after you have stopped paying, which is exactly when most people discover they need to.
Sign-in and audit records are kept while the account exists, because their whole value is being able to look back. Backups roll off on their own schedule, so a deletion reaches backups within the normal backup cycle rather than instantly.
Your rights over your own data
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it. Most of this you can simply do inside the product, which is faster than asking: export is a button, correction is an edit, and closing the account starts the deletion.
Depending on where you live you may have additional rights under laws such as the GDPR or the California Consumer Privacy Act, including the right to complain to a regulator. We do not sell personal information as those laws define selling, so there is no sale to opt out of.
kBooks is operated from and hosted in the United States. If you are outside the United States, using it means your data is processed there.
Children
kBooks is a product for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Asking us something about this
Use the contact details on this page. A person reads it.