Privacy Policy
This policy explains what Binderledger collects, why, where it is processed, and the choices you have. We handle financial and tax documents, so we keep the footprint small and the purpose narrow. It also describes how we handle nonpublic financial information and federal tax return information, and how data is processed internationally.
01What we collect
Account information: your email address and authentication credentials, managed through our identity provider.
Documents and extracted data: the closing statements you upload and the line items, classifications, and journal entries derived from them. These documents can contain sensitive information such as Social Security numbers, taxpayer identification numbers, and financial account numbers.
Connected-account tokens: OAuth tokens for QuickBooks Online or Xero when you choose to connect them, encrypted at rest and used only to read your chart of accounts and post entries you approve.
Account activity: a log of security-relevant actions on your account, such as connecting or disconnecting an accounting entity, so you can review that history.
Basic usage and device data needed to operate the service securely and diagnose problems. Payment card details are collected and processed by our payment provider, not by us.
02How we use it
We use your data to extract line items, classify them for tax, generate journal entries, post approved entries to your books, and produce audit memos and share links you request.
We use account and usage data to authenticate you, provide support, secure the service, and meet legal obligations. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use your documents or extracted data to train third-party AI models.
03Document processing & AI
We do not retain the original uploaded file. Closing documents are processed in memory during extraction and are not stored on our servers; if an extraction fails, nothing from that file is saved. What we keep is the structured data you review — line items, classifications, and journal entries — scoped to your account.
Extraction and classification involve automated processing, including language models used to suggest tax treatments. This processing is performed through a third-party AI provider (Google) on a paid enterprise tier under a data processing agreement that prohibits using your content to train its models and does not subject your content to human review. These suggestions are always subject to your review before anything is posted.
Your documents are processed to serve you and are scoped to your account. We do not expose one customer's documents or extracted data to another.
04Financial & tax information
Many of our users are tax and accounting professionals, and the documents you process may contain nonpublic personal financial information and federal tax return information. When we process that information, we do so as a service provider acting on your instructions and only to provide the service.
We maintain an information security program with administrative, technical, and physical safeguards, including access controls, encryption of data in transit and at rest, and multi-factor authentication, consistent with the expectations of the Gramm-Leach-Bliley Act Safeguards Rule.
If you are a tax return preparer, U.S. law (Internal Revenue Code section 7216) may require you to obtain your client's written consent before disclosing that client's tax return information to us, including because our processing occurs outside the United States. See our separate 7216 consent template and your Terms for details; you are responsible for obtaining any consents required before you upload.
05Where your data is processed
Binderledger is operated by a business based in India. Your data — including the contents of the documents you process — is transferred to, accessed from, and processed in India and in other countries where we or our service providers operate. Laws in those countries may differ from those in your own.
By using the service you understand that your data will be processed outside the United States. Where a document contains federal tax return information, this cross-border processing is the reason the section 7216 consent described above expressly covers disclosure to a service provider located outside the United States.
06Service providers (subprocessors)
We share data only with service providers that help us run Binderledger, under agreements that limit them to processing on our behalf. Our core subprocessors are: our identity provider (authentication), our cloud hosting and database provider (application hosting and storage), our AI provider Google (document extraction and classification, on terms that prohibit model training), and our payment provider / merchant of record (billing and tax collection).
We share data with QuickBooks Online (Intuit) or Xero only as you direct, when you connect them and approve a posting. We may disclose information if required by law or to protect the rights and safety of users and the public. We do not sell your data.
07Retention, security & breach notice
We retain your extracted data for as long as your account is active or as needed to provide the service, and then delete or anonymize it within a reasonable period, subject to legal retention requirements. Original uploaded files are not retained.
We protect data in transit and at rest, restrict access on a need-to-know basis, require multi-factor authentication, and use idempotent, audited write-backs so postings cannot be silently duplicated. No system is perfectly secure, but we design to minimize what is stored and who can reach it.
If we experience a security incident affecting your information, we will notify you and the relevant authorities as required by applicable law, including federal financial-data breach-notification requirements and U.S. state breach-notification laws.
08Your privacy rights
You can access, correct, export, or delete your data at any time. Disconnecting a linked accounting entity from within the app revokes the authorization with the provider and deletes the stored tokens and that entity's saved account mappings. Deleting your account removes your documents and extracted data, subject to legal retention limits.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (as amended by the CPRA) and other U.S. state privacy laws — including the right to know, access, correct, delete, and port your personal information, to opt out of any sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by these laws, and we will not discriminate against you for exercising your rights.
To exercise any of these rights, contact privacy@binderledger.com. We will verify your request and respond within the time required by applicable law.
09Children
Binderledger is a professional tool and is not directed to, or intended for use by, children under 16. We do not knowingly collect personal information from children.
10Changes & contact
We may update this policy and will revise the date above when we do; material changes will be communicated to you.
For privacy questions or to exercise your rights, contact privacy@binderledger.com.