Privacy Policy

Effective September 16, 2026 · Shop Bookkeeper by StreamlineSMB

Shop Bookkeeper ("we", "our") is a bookkeeping application operated by StreamlineSMB for business owners, currently deployed for Sweet Aloha Ice Cream, LLC. This policy explains what financial data we handle, how, and your rights.

1. What data we collect

• Bank transaction data — dates, amounts, and merchant descriptions from accounts you connect, accessed exclusively through Plaid's Transactions product.
• Account display data — account names and last-4 digits only.
• App data — the categories, rules, and notes you create; inventory and equipment records you enter; an audit log of actions taken in the app.

What we never collect: online-banking usernames or passwords (authentication happens entirely inside Plaid's hosted widget), full account numbers, routing numbers, or data from any Plaid product other than Transactions.

2. How data is used

Solely to provide the bookkeeping service: importing, categorizing, consolidating, reconciling your transactions and generating financial reports (P&L, balance sheet). We do not sell, rent, or share your data with advertisers or data brokers. We do not use your data to train AI models.

3. Storage and security

• All traffic is encrypted in transit (TLS 1.2+ via Cloudflare and Caddy).
• Data is stored at rest on encrypted cloud volumes (DigitalOcean, SOC 2, US region).
• Access is restricted to the account owner via server-enforced IP allowlisting; administrative access is SSH key-only.
• Every categorization and sync action is recorded in an append-only audit log.
• Encrypted, integrity-checked backups run every 15 minutes with 30-day retention.

4. Plaid

Our bank connectivity is provided by Plaid Inc. When you connect an account, you interact with Plaid's interface and agree to Plaid's terms and privacy policy. We receive only transaction history under the Transactions product. You can revoke our access at any time by disconnecting the institution in the app or by contacting us.

5. Retention

Transaction history is retained for the life of your account to provide continuous bookkeeping. Backups rotate on a 30-day schedule.

6. Your rights & data deletion

You may request export or permanent deletion of all your data at any time by emailing [email protected] or [email protected]. We complete verified deletion requests within 30 days, including revoking Plaid tokens via Plaid's item/remove API. See our Data Deletion page for details.

7. Cookies & sessions

The app uses a single session cookie for login state. No advertising or analytics trackers are used.

8. Changes

Material changes to this policy will be posted here with a new effective date.

9. Contact

Privacy questions: [email protected]
Postal: StreamlineSMB, Davie, FL, USA