Privacy Policy

1. Data We Collect

We collect only what is necessary to provide our bookkeeping services:

• Account Information: Your name, email address, and business details when you sign up.
• Client Information: Names, email addresses, and business types of your clients (stored only to facilitate document collection).
• Documents: Financial documents uploaded by your clients through our secure portal. These are stored encrypted and are only accessible to you and the uploading client.
• Usage Data: Basic analytics about how you use the platform (e.g., number of clients, send schedules) to improve our service.

2. How We Protect Your Data

Your data security is our top priority:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Secure Storage: Documents are stored in SOC 2 compliant cloud infrastructure with strict access controls.
• Access Controls: Only you can access your account and your clients' data. Our team cannot view your documents without your explicit permission for support purposes.
• Regular Audits: We conduct regular security audits and penetration testing.
• No Data Selling: We never sell, rent, or trade your personal information to third parties.

3. Document Retention

You control your data. Documents uploaded through the portal are retained according to your settings. You can delete any document or client data at any time. When you delete data, it is permanently removed from our active systems within 30 days.

4. Third-Party Services

We use trusted third-party services only when necessary:

• Clerk: For secure authentication and user management.
• DigitalOcean Spaces: For encrypted document storage.
• Resend: For sending email reminders (only email addresses are shared).
• LemonSqueezy: For payment processing (we do not store your payment details).

All third-party providers are vetted for security and privacy compliance.

5. Your Rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate information
• Delete your account and all associated data
• Export your data in a standard format
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@pockclient.site.

6. Cookies and Tracking

We use minimal cookies only for essential functionality (authentication and session management). We do not use tracking cookies for advertising purposes.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through the platform.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@pockclient.site.