Privacy Policy

We collect only what we need to run the service. Categories include:

• Account information from Clerk. When you create an account, our authentication provider Clerk stores your email, name, and login credentials on our behalf.
• Financial data from connected services. When you connect QuickBooks Online, Stripe, Shopify, or PayPal, we read transaction, payout, customer, vendor, and account-balance data through their official APIs based on the permissions you grant.
• Files you upload. CSV bank or credit-card statements, receipt images, receipt PDFs, and supporting documents you upload.
• Website analytics. We use Google Analytics 4 to understand aggregate site usage, page performance, and traffic sources so we can improve ArnBooks. GA4 may set analytics cookies or receive standard browser/device information. We do not sell personal information. If Meta Pixel or advertising pixels are enabled, they must be covered by this policy and the applicable cookie/consent posture.
• Waitlist email. If you join the waitlist before signing up, we store your email and the source of the signup so we can invite you to the beta.

• To provide the bookkeeping support workspace: ingest transactions, store uploaded support files, suggest categories, prepare review notes, and produce dashboards.
• To learn rules per workspace. Our categorization model adapts to your accepted corrections inside your workspace. We do not share one customer's rule data with another customer's workspace.
• To provide customer support when you contact us.
• To bill you for paid plans and prevent fraud or abuse.
• To keep the service secure, including detecting unauthorized access.

We share data only with service providers that help us run ArnBooks, and only as needed to deliver the service:

• Hosting and infrastructure: Vercel (application hosting), and our managed Postgres database provider.
• Authentication: Clerk.
• Billing: Stripe.
• AI and OCR processing: OpenAI and/or Anthropic, used to extract receipt fields and draft category suggestions. We design prompts to send the minimum data required and we do not use your data to train external foundation models.
• Website analytics: Google Analytics 4, used for aggregate website measurement and traffic reporting.
• Connected platforms you authorize: QuickBooks Online, Shopify, PayPal — we send and receive data with these services only on your behalf.

We may also disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and property of ArnBooks, our users, or others. We do not sell your personal information to third parties.

We keep your data for as long as your workspace is active. If you delete your account, we delete your personal data and connected-source data within 30 days, except where we are required to retain limited records (for example, billing records for tax purposes). Backups are rotated on a regular schedule and overwritten in the normal course.

You can request access to, export of, correction of, or deletion of your personal data by emailing hello@arnbooks.ai.

• Canada (PIPEDA): you have the right to access and correct personal information we hold about you.
• European Economic Area and United Kingdom (GDPR / UK GDPR): you have rights of access, rectification, deletion, restriction, portability, and objection. The legal basis for most processing is performance of our contract with you; for security-related processing it is our legitimate interest.
• California (CCPA/CPRA): you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your rights.

We will respond to verifiable requests within the time required by applicable law.

Stored data is hosted on Vercel and a managed Postgres database provider. ArnBooks stores QuickBooks OAuth tokens in encrypted form, uses account/workspace-scoped access controls, and serves original receipt downloads through authenticated private responses where implemented. No system is perfectly secure, and these controls should not be read as SOC 2, bank-grade, or compliance certification unless separately published.

If we ever learn of a breach affecting your data, we will notify you as required by applicable law.

ArnBooks is operated from Canada. Some of our service providers (including Vercel and Stripe) process data in the United States. By using ArnBooks you understand that your information may be transferred to and processed in the United States and other countries with different data protection laws than your country of residence.

ArnBooks is not directed to anyone under 18. We do not knowingly collect information from people under 18. If you believe a minor has provided us information, please contact us so we can delete it.

We may update this policy as the product evolves. If we make material changes, we will notify registered users by email and post the updated date at the top of this page. Continued use of the service after the effective date means you accept the updated policy.

For privacy questions, requests, or complaints, email privacy@arnbooks.ai.

Privacy Officer:
Julian German, Director, Celmaste Capital Inc.

Mailing address:
Celmaste Capital Inc.
150 Point Rd
Belliveau's Cove, NS, B0W 1J0
Canada