Privacy Policy

Who we are

RW Business Services, LLC ("RWBS", "we") provides bookkeeping and business-automation software and services. This policy explains what information we collect, how we use and protect it, and your choices.

Information we collect

• Account & contact information you provide (name, email, business details).
• Financial account information via Plaid. With your authorization, we use Plaid Inc. to connect your financial accounts and retrieve information such as account and routing identifiers, balances, and transaction history, so we can keep your books.
• Documents you upload (for example receipts and statements).
• Usage information needed to operate and secure the service.

We practice data minimization — we request only the data needed to provide the service you have authorized.

Plaid

We use Plaid to connect to your bank. By connecting an account, you also agree to Plaid's End User Privacy Policy (plaid.com/legal), which describes how Plaid collects, uses, and handles your information. Plaid's data-transparency messaging in the connection flow discloses the data types and use case before you connect.

How we use your information

Only to provide and improve the bookkeeping and accounting service you have engaged us for — recording and categorizing transactions, reconciliation, reporting, and related support. We do not sell your personal or financial information.

Consent

We collect, process, and store your information based on your consent and to provide the service you request. You may withdraw consent by disconnecting your financial accounts and/or closing your account — see Your choices and rights.

How we protect your information

We use administrative, technical, and physical safeguards, including TLS 1.2+ in transit and encryption at rest (database encryption plus application-layer AES-256-GCM encryption of bank access tokens), least-privilege access, and multi-factor authentication on administrative accounts. See our Information Security Policy for details.

Service providers (subprocessors)

We share information only as needed with reputable providers that support the service: Plaid (bank connectivity), Vercel (hosting), Neon (database), Google (authentication and file storage), Resend (email), and Anthropic (AI processing) — each under their own security and privacy commitments. We do not sell data or share it for third-party advertising.

Retention & deletion

We retain information only as long as needed to provide the service or to meet legal obligations (for example tax and accounting), then delete it. Disconnecting a bank connection removes it at Plaid (via /item/remove) and deletes the stored access token. See our Data Retention & Deletion Policy.

Your choices and rights

You may request access to, correction of, or deletion of your information; disconnect a financial account at any time; and revoke access to Plaid, including via Plaid's portal at my.plaid.com. We honor deletion requests subject to records we are legally required to retain. Contact security@rw-businessservices.com. Depending on your location, you may have additional rights under applicable privacy laws.

Changes

We will post any changes to this policy and update the effective date.