AccruleafPrivacy policy
Accruleaf is online accounting software provided by Symbiotries, Inc. ("Symbiotries", "we", "us"). This policy explains what information we collect when you use Accruleaf at accruleaf.com and app.accruleaf.com (the "Service"), how we use it, who we share it with, and the choices you have.
In short: we use your information to run the Service for you. We don't sell your information, and we don't use your financial data for advertising.
1. Information we collect
Information you give us
- Account information: your name, email address and password (stored only as a one-way hash), and your role on each company you belong to.
- Company information: your business name, legal name, address, phone, email, employer identification number, logo and settings.
- Accounting records: the customers, vendors, invoices, bills, expenses, payments, journal entries, sales tax rates, payroll totals and other records you enter or import. Vendor records may include a vendor's tax identification number if you choose to record it for 1099 reporting.
- Files you upload: bank statement files, payroll reports and accounting data exported from other software. We read these files to create records in your books. For payroll reports, we keep only the totals you confirm and the column headings (so we can read the same report format next time); we don't store the employee-level detail in the file.
- Bank details for payments: if you pay bills by ACH, the routing and account numbers you enter for your vendors and, if your bank requires it, for your own account. Account numbers are encrypted before they're stored, and only the last four digits are shown in the Service.
- Messages: questions you send to your accountant through the Service, and invoices you email to your customers.
Information from your bank (through Plaid)
If you connect a bank or credit card account, we use Plaid Inc. ("Plaid") to retrieve information from your financial institution: account names, types and the last digits of account numbers, balances, and transactions (date, amount and description). You sign in to your bank in Plaid's window; we never see or store your bank username or password. We receive an access token from Plaid, which we store encrypted. We request read-only access for bank feeds; connecting a bank does not allow Accruleaf to move money. Plaid's handling of your information is described in the Plaid End User Privacy Policy.
Information collected automatically
- Cookies: we use one cookie to keep you signed in, and nothing else. We don't use advertising or analytics cookies, and we don't track you across other websites.
- Technical information: like most websites, our servers and hosting provider record technical details such as IP address, browser type and the pages requested, for security, troubleshooting and preventing abuse (for example, limiting repeated sign-in attempts).
- Activity log: the Service records actions taken in each company (for example, who created, changed, voided or downloaded a record), which owners and admins of that company can see.
2. How we use information
- To provide the Service: keep your books, post transactions, prepare reports, import bank transactions, create payment files you request, and send the emails you ask us to send (such as invoices and invitations).
- To keep the Service and your data secure, including authentication, backups, fraud prevention and investigating problems.
- To communicate with you about your account, such as password resets, invitations, important changes and support.
- To bill for subscriptions, once paid plans are in place.
- To comply with law and enforce our Terms of service.
We don't sell personal information, share it for cross-context behavioral advertising, or use your financial data to market other products to you.
3. Who can see your information
- People you invite: team members and accountants you add to a company can see that company's records according to their role. Accountants you invite can see and work in your books until you remove them.
- Your customers: when you email an invoice or share its link, the recipient can view that invoice and your business contact details on it.
- Service providers who process information on our behalf, under contracts that limit their use of it:
Provider What they do for us Render Services, Inc. Hosts the application and database (United States) Amazon Web Services, Inc. Stores encrypted backups and sends email on our behalf (United States) Plaid Inc. Connects to your financial institutions when you choose to link an account Stripe, Inc. Processes subscription payments, once paid plans are in place - Legal reasons: we may disclose information if required by law, subpoena or court order, or when we believe in good faith that it's necessary to protect the rights, property or safety of our users, the public or Symbiotries.
- Business transfers: if Symbiotries is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.
4. Security
We protect information with measures that include HTTPS encryption for all connections, an additional layer of encryption for bank account numbers and bank connection tokens, hashed passwords, role-based access within each company, an activity log, and daily backups stored separately from the application server in encrypted storage. No system is perfectly secure, so we can't guarantee absolute security, but we work to protect your information and will notify you as required by law if a breach affects it.
5. How long we keep information
We keep your company's records for as long as your account is active, because accounting records need to be complete. If you ask us to close your account and delete your data, we delete it from the live Service within 30 days. Copies in backups are deleted automatically as those backups expire, normally within 90 days. We may keep limited information longer where the law requires it or to resolve disputes. Disconnecting a bank in Accruleaf ends our access to that bank through Plaid; transactions already imported remain in your books.
6. Your choices and rights
- Access and correction: you can view and update your account and company information in the Service.
- Export: you can print and export reports, including the general ledger, to spreadsheet files.
- Bank connections: you can disconnect a bank at any time under Bank connections.
- Deletion: you can ask us to delete your account and company data by contacting us below.
- State privacy rights: depending on where you live, you may have rights to know, access, correct, delete or obtain a copy of your personal information, and to not be discriminated against for using those rights. To make a request, contact us. We'll verify your request before acting on it.
If you're an employee, vendor or customer of a business that uses Accruleaf, that business controls the records about you. Please contact the business directly; we'll help them respond.
7. Children
The Service is for businesses and isn't directed to children under 16. We don't knowingly collect personal information from children.
8. Changes to this policy
We may update this policy. If we make material changes, we'll notify account owners by email or in the Service before the changes take effect. The effective date above shows when it was last updated.
9. Contact us
Symbiotries, Inc.
15 Glenn Bridge Road, Unit F
Arden, NC 28704
Phone: 814-853-3535
Email: randy.kreider@symbiotries.com