Privacy

Last updated: [DATE]

Draft. This is a plain-English starting point, not a lawyer's document. Have it reviewed before you take payment from anyone. Anything in [brackets] needs a real answer first.

The short version

We never ask for your bank login or marketplace passwords. You upload the reports yourself.
Your numbers are used to keep your books, and for nothing else. Never sold, never shared with advertisers, never compared with another client's.
Every time someone here opens your books, it's recorded, and you can see it on your Account page.
Messages and files stay in your account, not in an email inbox.
Leave, and your records and files are deleted 12 months later, or sooner if you ask.

The details, including which outside services touch your data, are below.

What we collect

Your name, email address and business name.
The files you upload: marketplace reports, bank statements, sourcing records.
What you tell us when you answer questions about your own spending.
Two optional answers: how you heard about us when you sign up, and the reason you give if you cancel.
Messages and files you send us in your account.
If you tell us you sell somewhere we don't read files from and attach a sample file, we keep it in your account so we can see which platforms clients use. We don't read it into your books. A person at SoldAnchor may open it by hand; each time appears in your access log. Removing a platform takes it off your list; the file stays stored until your records are erased.
Basic technical logs — when you signed in, what failed, so we can fix things.

Payment card details go directly to Stripe. We never see or store them.

What we do with it

We use it to produce your books, and for nothing else. We do not sell it, rent it, or share it with advertisers. We do not compare one client's data against another's.

Who looks at your books depends on your plan. On Managed and Profit Review a bookkeeper at SoldAnchor reads your month as part of the service. On Books and Insights you review and approve your own month, and nobody here opens your books unless you ask us for help. On every plan, each time someone here opens your books it is recorded and you can see it on your Account page.

If you send a report to your tax preparer using a link from your account, anyone who has the link can open that report until it expires after 30 days or you cancel it. Each time it is opened, we record it in your access log.

Who else touches it

Stripe — payments.
Render — where the software runs.
Cloudflare — where your uploaded files are stored.
Resend — sends our emails to you.
Anthropic — a small share of transactions we can't categorise by rule are sent for a suggestion (description, amount and date), and item titles are sent to sort your products. Receipt photos you add in Sourcing are read the same way. When you write to us, your message is sent so we can draft a reply, which a person reads and edits before anything is sent. We never add your account numbers; anything you write in a message, such as a signature, is included as written.

How long we keep it

While your account is open, and for twelve months after you close it — long enough to cover a full tax year, so if you cancel in February you still have last year's books when you file in October.

After twelve months your records and uploaded files are deleted permanently and automatically. We email you thirty days before that happens, so you have time to download your reports and every line from your marketplace files and bank statements (choose Account, then Download everything). Keep your own copies of the files you uploaded, because that download does not include them. You can also ask us to delete everything sooner, at any time.

Deleting your data

Ask us and we erase everything: your records, your uploaded files, all of it. That cannot be undone, so download your reports and every line from your marketplace files and bank statements first (choose Account, then Download everything), and keep your own copies of the files you uploaded. We keep a single line noting that you asked and we did it.

After erasure we keep only an anonymous record: the months you joined, changed plan and left, your plan, whether you were a founding client, how you heard about us, and the reason you gave for leaving. Nothing in it identifies you.

We also keep a combined monthly revenue total, with no client or plan attached.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email support@soldanchor.com and we will respond within [DAYS] days.

Contact

[LEGAL ENTITY NAME], [ADDRESS] · support@soldanchor.com