Skip to content

Privacy Policy

Last updated: [Effective Date]

Template — not legal advice. This document is a starting point only. Review it with your own counsel and replace every [Company], [Jurisdiction] and [Effective Date] placeholder before relying on it.

This Privacy Policy explains how [Company](“we”, “us”, “our”) collects, uses, shares and protects information in connection with CovelBooks, our multi-company accounting platform. It applies to our marketing site and to the product.

1. Information we collect

  • Account information — your name, email address and, where you provide it, your company name, when you sign up or contact us.
  • Financial content you add — the companies, banks, accounts, cards, transactions, transfers and imported CSV statements you create or upload to your ledger.
  • Billing information — your plan and billing status. Payment card details are collected and processed directly by Stripe; we do not store full card numbers.
  • Usage and device data — limited, aggregated information about how the service is used, plus technical data such as IP address and browser type when you contact us or use the service.

2. How we use information

  • to provide, secure and maintain CovelBooks and your ledger;
  • to process subscriptions and payments through Stripe;
  • to respond to your messages and provide support;
  • to send service and account notices, including card due and expiry alerts you enable;
  • to detect, prevent and address fraud, abuse and security issues; and
  • to comply with legal obligations.

4. Sharing and subprocessors

We do not sell your personal information. We share it only with service providers who process data on our behalf under contract, including:

  • Stripe — payment processing and subscription billing;
  • Our hosting and database providers — to run the application and store your data;
  • Our email provider — to deliver account and support emails, including messages you send us through the contact form.

We may also disclose information where required by law or to protect the rights, safety and security of our users and the service.

5. Data retention

We retain your information for as long as your account is active and as needed to provide the service. After you close your account, we delete or anonymize your data within a reasonable period, except where we must keep it to meet legal, tax or accounting obligations or to resolve disputes.

6. Security

We follow industry-standard practices to protect your data, including encryption in transit and at rest, role-based access controls, and regular backups. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to issues. See our security overview for more detail.

7. Your rights and choices

Depending on your [Jurisdiction], you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can manage much of your data directly in the product, including exporting your ledger. To make a request, email hello@example.com. You may also have the right to lodge a complaint with your local data-protection authority.

8. Cookies and analytics

We keep tracking to a minimum. We use a small number of cookies that are necessary to sign you in and remember preferences such as your theme. For website measurement we use Vercel Web Analytics, which is cookieless and does not use cross-site tracking identifiers — so we do not show a cookie consent banner. We do not use advertising or third-party marketing trackers.

9. International data transfers

We and our service providers may process and store information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards required by applicable law in your [Jurisdiction], such as standard contractual clauses.

10. Children

CovelBooks is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice before they take effect and update the “Last updated” date at the top of this page.

12. Contact us

For privacy questions or requests, email hello@example.com, or use our contact page. The data controller is [Company].