Privacy Policy

Effective date: November 7, 2026

Fiscrete LLC, a Nevada limited liability company (“Fiscrete,” “we,” “us,” or “our”), provides the Fiscrete bookkeeping platform (the “Service”). This policy describes what information we collect through the Service, why we collect it, who we share it with, and the choices you have. If you have questions, contact us at support@fiscrete.com.

1. Information we collect

We collect the following categories of information when you use the Service:

Account and identity data. Your email address and authentication state, managed by our authentication provider, Supabase. We do not store your password ourselves.
Organization and role data. The business(es) you create or are invited to, and your role/permissions within them.
Financial and business records you provide or connect. Customer and vendor records (including names, and optionally emails and phone numbers), transactions, invoices, accounts, and related bookkeeping data — either entered directly or synced from a connected QuickBooks Online account.
Bank connection data. Only if you choose to connect a bank account through Plaid: the account name, the last four digits of the account number, the account type, balances, and the transactions on the accounts you authorize. We never see or store your bank login credentials; you enter them directly with Plaid and your bank.
Uploaded documents. Receipts, bank statements, and other files you upload, and metadata about those files (filename, type, size).
Billing information. Your subscription plan and billing status. Payment card details are entered directly into our payment processor’s (Stripe’s) hosted checkout and billing pages — we never receive or store your card number, expiration date, or CVC.
Usage and audit data. A record of actions taken in the Service (for example, who edited a transaction and when), kept for security and accountability purposes.

2. How we use your information

We use the information above to:

Provide, operate, and maintain the Service, including bookkeeping, reporting, and document storage;
Generate AI-assisted categorization suggestions for your transactions (see “AI features” below);
Sync data with QuickBooks Online, if and only if you choose to connect your account;
Import transactions from your bank, if and only if you choose to connect a bank account;
Process subscription billing through Stripe;
Provide customer support and respond to your requests;
Maintain security, detect fraud or abuse, and keep an audit trail of account activity; and
Comply with legal obligations.

We do not sell your personal information, and we do not use your data to serve you third-party ads.

3. AI features

When AI-assisted categorization is enabled, transaction details — type, date, description, vendor and customer names, amount, and currency — are sent to our AI provider, Anthropic, to suggest a chart-of-accounts category, together with the names of your chart-of-accounts categories and, for a vendor you have categorized before, a few of your earlier categorizations. Descriptions are sent as recorded and may contain names or other details that appear in them. We do not send customer or vendor contact details (email, phone) to our AI provider for this purpose. AI suggestions are recommendations only: no AI output is treated as a final accounting record without your review, and you remain responsible for reviewing and approving categorizations before relying on them.

Where the Books Assistant is enabled, the questions you type into it are sent to Anthropic together with the figures it looks up in your books to answer them: account totals for the period you ask about (bank balance, receivables, payables, revenue, expenses, and net profit) and, for recent transactions, the date, type, description, amount, currency, and account name. Transaction descriptions are sent as recorded in your books, so they may contain names or other details that appear in them. Questions are free text, so they may include personal information about you or other people if you type it in. We do not send customer or vendor contact details (email, phone). The assistant’s quick-answer buttons are answered from our own database and send nothing to Anthropic. Assistant answers are not tax, legal, or financial advice.

Where enabled, job estimates can also include a short written explanation generated by Anthropic. For that, we send the job type, size, the computed cost figures, and any scope notes you type. Scope notes are free text sent exactly as you enter them, so please do not put customer names or contact details in them. When you upload a bank statement or receipt for import, the document may be sent to Microsoft Azure Document Intelligence to read its text. Statements can contain account and routing numbers, so only upload documents you are comfortable sending.

4. Who we share information with

We share information with the service providers (“subprocessors”) that help us run the Service, each limited to what they need to perform their function. Our current subprocessors, and exactly what each one receives, are listed on our Subprocessors page. We do not share your information with any other third party for their own marketing purposes, and we do not sell it.

If you connect a QuickBooks Online account, data flows both to and from Intuit under the authorization you grant during that connection. You can disconnect QuickBooks at any time from your account settings.

If you connect a bank account, you do so through Plaid, which collects and processes your information under Plaid’s own terms. By connecting, you agree to Plaid’s End User Privacy Policy. We receive only the data described in “Information we collect” above. You can disconnect a bank at any time from your account settings, and we then revoke our access at Plaid.

We may also disclose information if required by law, or to protect the rights, property, or safety of Fiscrete, our users, or others.

5. Data security

We apply industry-standard safeguards appropriate to the sensitivity of the data, including encryption of sensitive fields, database access controls scoped to your organization, encrypted connections (TLS), and audit logging of account activity. You can turn on two-factor authentication (an authenticator app) for your account, and we require multi-factor authentication before you can connect a bank account. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

6. Data retention and deletion

Files you upload are kept until you remove them. “Archiving” a file hides it from your lists but keeps it stored as part of your records; an owner or admin can permanently delete an archived file at any time from Settings → Data & privacy, which removes the file itself.

If your subscription ends. We keep your organization’s records after a subscription ends or a trial expires, so they are there if you come back. Thirty days after a subscription ends we disconnect any bank connections, which stops new transactions from being imported; transactions already imported stay in your records, and you can reconnect if you subscribe again. If an organization has had no paid subscription and no sign-ins for three years, we may permanently delete it, after emailing the owner at least 30 days in advance.

Deleting an organization. When the owner deletes an organization, it is locked immediately and scheduled for permanent deletion 30 days later. During those 30 days the organization cannot be used, but the owner can cancel the deletion and unlock it. We disconnect QuickBooks and bank connections and cancel the paid subscription at the moment deletion is requested; these are not restored if you cancel, so you would need to reconnect them and subscribe again. When the 30 days end, we permanently delete the organization’s financial records and uploaded files.

What we keep afterward. We keep an audit log of account activity (who did what and when, including limited details of the affected records, such as amounts), which is designed so it cannot be altered, and records we are required or permitted to keep for legal, accounting, tax, fraud-prevention, or dispute-resolution purposes, such as billing records. Copies held in backups by our infrastructure providers are overwritten on those providers’ own schedules. You can also ask us to delete your personal information at any time (see “Your rights” below), and some information may be retained longer where required by law.

7. Cookies

We use strictly necessary cookies required to keep you signed in and operate the Service securely — these do not require consent. If we use analytics cookies (for example, to understand how the Service is used), we only set them after you affirmatively accept them via the cookie banner shown on your first visit; declining, or sending a Global Privacy Control signal from your browser, keeps analytics cookies off. You can change your choice at any time by clearing your cookies and revisiting the Service.

If you accept analytics, we may also record how you move through pages (clicks, scrolling, and page layout) to find and fix usability problems. These recordings hide all text on the screen and everything you type, and they block images and uploaded files entirely, so your financial records, bank data, and documents are not captured in them.

8. Your rights

Regardless of where you live, you may ask us to access, correct, or delete the personal information we hold about you by emailing support@fiscrete.com. We will respond within a reasonable time, and in any event within 45 days. We apply this same baseline to every user of the Service — including if you signed up from outside the United States — regardless of whether a specific law in your location separately requires it.

California residents (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; to request deletion of your personal information; to correct inaccurate personal information; and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is no “opt-out of sale” action needed. You may exercise these rights by emailing the address above; we may need to verify your identity before completing your request.

9. Accessibility

We are committed to making the Service usable by people with disabilities and aim to conform to the Web Content Accessibility Guidelines (WCAG) 2.1, Level AA, consistent with our obligations under the Americans with Disabilities Act (ADA), California’s Unruh Civil Rights Act, and comparable accessibility standards in other jurisdictions (for example, the EU’s EN 301 549 standard). If you use assistive technology and encounter a barrier, or need this policy or the Service in an alternative format, contact us at support@fiscrete.com.

10. Children’s privacy

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the change takes effect. The “Effective date” above reflects the most recent revision.

12. Contact us

Fiscrete is operated by Fiscrete LLC, a Nevada limited liability company. For any question about this policy or your data, contact support@fiscrete.com.