SticklerBooks Privacy Policy

Information we collect

We collect information you or your bookkeeper provide, including names, contact details, business records, receipts, invoices, and accounting entries.

When you choose to connect a financial account through Plaid, we may receive account metadata (such as institution name, account name, type, and masked account number) and transaction information (such as date, amount, merchant or description, category, payment channel, check number, and location data supplied by the institution). SticklerBooks does not receive or store your bank login credentials.

How we use information

We use information to provide bookkeeping and accounting services, import and review bank activity, reconcile accounts, prepare reports and tax-supporting records, maintain audit trails, secure the service, troubleshoot errors, and comply with legal and professional obligations. Plaid-sourced transactions are staged for human review before they become accounting entries.

Account connections and consent

Connecting an account is optional and begins only after an authorized user accepts the SticklerBooks disclosure and launches Plaid Link. Plaid presents the financial-data permissions and account choices. You may disconnect a linked institution from SticklerBooks. Disconnecting stops future collection but does not automatically erase records we must retain for bookkeeping, tax, legal, fraud-prevention, or audit purposes.

How we disclose information

We disclose information only as needed to operate the service and provide authorized bookkeeping services: to Plaid for account connectivity; to hosting, storage, email, and other infrastructure providers acting on our behalf; to your authorized bookkeeper, accountant, tax professional, or business representatives; when you direct us to disclose it; or when required to protect rights, prevent fraud, or comply with law. We do not sell personal or financial information or use Plaid data for advertising.

Security

SticklerBooks uses role-based access controls, mandatory authenticator-app MFA, encrypted network connections, secure session cookies, rate limiting, audit logging, backups, and encryption for Plaid access tokens and other designated sensitive fields. No system is perfectly secure, but we maintain safeguards appropriate to the sensitivity of bookkeeping and financial data.

Retention and deletion

Bookkeeping and tax-supporting records are generally retained for seven years. Operational database backups follow a documented rotation, with year-end records retained for seven years. We delete or de-identify information when it is no longer needed, subject to legal, tax, accounting, security, dispute, and backup-retention obligations. A client may request access, correction, or deletion by contacting us; we will explain any information we must retain.

Your choices and rights

You may decline to connect an account, choose which eligible accounts to share in Plaid Link, disconnect an institution, and request access to or correction of your information. Depending on where you live, additional privacy rights may apply. We will not discriminate against you for making a privacy request.

Changes to this policy

We may update this policy as the service, vendors, or legal requirements change. We will post the revised policy here with a new effective date and provide additional notice when a material change requires it.

Contact us

For privacy questions or requests, email adam@stickler4details.com.