×
Privacy Policy
Effective September 13, 2026 · Last reviewed September 13, 2026
This Privacy Policy explains how BK Books (“we,” “us,” or “our”) collects, uses, shares,
protects, retains, and deletes personal information when you use our website and bookkeeping
service. Financial information is sensitive. We collect only what we need to provide the
service you request and use it only for the purposes described here.
Information we collect
Account and contact information: name, email address, business name,
account settings, and messages you send us.
Financial account information: when you choose to connect an account
through Plaid, we may receive institution and account identifiers, account type, account
holder details, balances, and transaction history. If a feature requires payment account
details, we may also receive account and routing numbers through Plaid.
Bookkeeping records: categories, reconciliations, invoices, receipts,
journal entries, reports, and information you upload or create.
Technical information: IP address, browser and device information,
timestamps, pages viewed, and security or diagnostic logs.
We do not receive or store the username and password you use to sign in to your financial
institution through Plaid Link. Plaid and your financial institution handle that
authentication.
Your consent to connect financial accounts
We obtain affirmative consent before collecting, processing, or storing data from a
connected financial account.
We do not connect an account based on silence, continued browsing, or a pre-checked box. You
must deliberately start the connection and complete the Plaid Link consent flow. Before
authorization, Plaid Link identifies the data categories requested and the purposes for
which they will be used. You choose the financial institution and accounts to connect and
authorize Plaid and us to access the disclosed data for bookkeeping, reconciliation,
reporting, and related features you request.
We maintain a record of the consent event, including its date, the policy version, the
connected institution, and the Plaid products, data scopes, and use cases authorized. If we
later request a new category of financial data or want to use connected data for a new
purpose, we will present a new disclosure and obtain additional consent through Plaid's
update flow before access begins. You may decline without connecting an account and ask
about another way to provide records.
You may withdraw consent and disconnect an account at any time through your account
settings, by submitting a privacy request, or through
Plaid Portal . When we
receive a disconnection request, we stop future collection and remove the Plaid connection
using Plaid's removal process. Disconnecting does not automatically erase bookkeeping
records we must retain for legal, tax, fraud-prevention, or dispute-resolution purposes;
those records follow the schedule below.
How we use information
Provide, maintain, and support bookkeeping, reconciliation, reporting, and requested
account features.
Authenticate users, protect accounts, prevent fraud, investigate misuse, and maintain
audit records.
Respond to requests, provide service notices, and communicate about the account.
Meet accounting, tax, contractual, and legal obligations and establish or defend legal
claims.
Improve reliability and usability using data that is aggregated or de-identified where
practical.
We do not sell personal information. We do not share financial account data for third-party
behavioral advertising, and we do not use it to advertise unrelated products.
How we share information
We share information only as needed with service providers that help operate the service,
such as Plaid for account connectivity, hosting and storage providers, identity and security
providers, and professional advisers. These providers may process information only for the
contracted service and must protect it. We may also disclose information when you direct us
to, to comply with law or valid legal process, to protect people and the service, or in a
business transaction subject to appropriate confidentiality protections.
Plaid processes information under its own
End User Privacy Policy . Your financial institution's privacy policy also applies to its handling of your
information.
Data retention and deletion
We maintain and enforce the following written retention and deletion schedule.
We retain personal information only while it is reasonably necessary for the stated purpose,
then delete it, de-identify it, or isolate it from ordinary use when law requires continued
retention. The privacy owner reviews this schedule and evidence of its operation at least
annually, and sooner when applicable law, our products, or our service providers materially
change. Each review and resulting update is documented.
Data
Retention period
Plaid connection credentials and access tokens
Until you disconnect the account, withdraw consent, or close the service account. We
disable the connection promptly and initiate Plaid Item removal within 30 days, unless
preservation is legally required.
Imported transactions and bookkeeping, tax, invoice, receipt, reconciliation, and
audit records
For the active relationship and generally 7 years after the end of the relevant
financial year or account closure, unless a different period is required by law,
contract, or an active dispute.
Consent and privacy-request records
7 years after the consent is withdrawn or the request is completed, to demonstrate
authorization and compliance.
Account profile and contact information
While the account is active, then deleted within 30 days of an approved deletion
request or account closure unless included in a record that must be retained.
Support communications
2 years after the matter is closed, unless needed for an active dispute or legal
obligation.
Security and diagnostic logs
Up to 12 months, unless needed longer to investigate a security incident, fraud,
abuse, or legal claim.
Encrypted backups
Removed through scheduled backup rotation within 90 days after deletion from active
systems. Backups are isolated and used only for disaster recovery.
Retention and deletion are enforced through documented account-closing procedures, access
revocation, scheduled lifecycle rules, and periodic review of deletion records. Legal holds
suspend deletion only for the information and period reasonably required. When the hold
ends, the normal schedule resumes.
Your privacy choices and rights
Depending on where you live, you may have the right to know or access the personal
information we hold about you; correct it; request deletion; obtain a portable copy;
restrict or object to certain processing; withdraw consent; or appeal our response. You may
also have rights to opt out of sale, sharing for cross-context behavioral advertising, or
certain uses of sensitive personal information. We do not discriminate against anyone for
exercising a privacy right.
Submit a request through the Contact link on this website or the support channel in your
account, with “Privacy request” in the subject. We will verify the request in a way
proportionate to its sensitivity, confirm receipt, and respond within the period required by
applicable law. An authorized agent may submit a request where permitted. If we deny a
request, we will explain why and describe any available appeal process.
Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of
financial information. These include encryption in transit and at rest, role-based access,
least-privilege controls, multi-factor authentication for privileged access, logging and
monitoring, vulnerability and dependency management, incident response procedures, and
service-provider review. No method of storage or transmission is completely secure.
Children, location, and policy changes
The service is intended for businesses and is not directed to children under 13. We do not
knowingly collect personal information from children. Information may be processed in the
United States and other locations where our providers operate, subject to appropriate legal
safeguards. If we make a material change to this policy, we will post the revised policy,
update its effective date, and provide additional notice or seek renewed consent when law
requires it.
Contact us
Questions and privacy requests may be submitted through the Contact link on this website or
through the support channel in your account. Before launch, this section will include the
legal business name, mailing address, and monitored privacy email address.
Back to the homepage ↗
×
Terms of Service
Website preview notice · Final service terms to follow
About this website
This page is a design preview for a bookkeeping business. The name, plans, pricing,
integrations, and financial dashboard are illustrative and may change before the service
launches.
No service is purchased here
Using the dashboard controls or submitting the demonstration form does not create an
account, purchase a plan, book a consultation, or establish a client relationship. No
payment is collected.
Sample financial information
The numbers and insights shown are fictional examples for demonstrating the design. They are
not accounting, tax, or financial advice for your business.
Before we launch
The final terms will identify the service provider and explain the agreed services, fees,
billing, cancellation, client responsibilities, and applicable legal terms. These preview
notes do not replace a service agreement.
Back to the homepage ↗