Privacy

1. What we keep

• Your account: your email address, your name, a picture if you add one, your sign-in sessions and which mails you want.
• Your companies: name, country, currency, description, website, settings, and who is on the team.
• The books: the exports and bank statements you upload, the documents you drop or forward, budgets, the choices you make on findings, and the questions you ask with their answers.
• Usage: a line for every charge, so you can see what you paid for. Card payments go through Stripe; we never see the card number.
• The waitlist: the address you left, and where you left it.

2. Why we keep it

To build your books, answer your questions, send the mails you asked for, and bill you for the work. We use your choices on findings to measure and improve our own checks. They are never shown to another customer.

We do not sell your data, show ads, or use tracking or analytics tools.

3. Where it is kept

On Cloudflare. The database and the files are stored in the EU. The engine that reads your books runs on Cloudflare too, and Cloudflare may run it in a data center outside the EU. Cloudflare's data processing terms cover that.

4. Who else handles it

Only these services, and only for the work named:

• Cloudflare: hosting, the database and file storage.
• Anthropic: Claude reads documents and pages you send, to pull out dates, parties and amounts. Anthropic does not train its models on this data.
• TypeSafe: runs Jev, the small model that settles closed questions about your books. Its terms say requests are not used for training.
• Resend: sends our mail, from the EU.
• Stripe: takes payments.
• Google: only if you choose to sign in with Google.

5. Cookies

One cookie keeps you signed in, one remembers the address you last signed in with, and one guards a Google sign-in while it happens. There are no other cookies, so there is no cookie banner.

6. How long

Until you delete it. Deleting a company erases its books, documents, budgets, choices, answers and team at once. Deleting your account does the same for every company you own.

There is no delete-account button yet. Mail hello@datini.app from the address you sign in with and it is done within 30 days, usually the same day.

Two things stay. The billing record stays for as long as bookkeeping law requires. Database backups keep deleted data for up to 30 days, then it is gone.

7. Your rights

You can see, correct, export or delete what we hold about you. The books can be read back as plain text at any time. For anything else, mail hello@datini.app. If you think we got it wrong, you can also complain to your data protection authority.

8. Clients' books

If you keep the books for someone else, you decide what goes in, and we handle it on your behalf under these same rules. Only add a client's records when you have the right to.

9. Changes

If this page changes in a way that matters, we mail you before it takes effect.