Right Intent SI LLC (“we,” “us,” or “our”) operates Book Keeper (also styled BookKeeper), the bookkeeping web application at https://www.risi-bookkeeper.com and related domains we operate (the “Service”). This Privacy Policy describes the information we collect and how we use it.
1. Information we collect
Depending on how you use the Service, we may collect:
- Account information — email address, name, password (stored by our authentication provider), and your role on a company (owner, admin, bookkeeper, or viewer).
- Business books — company profile, chart of accounts, customers, vendors, invoices, sales receipts, payments, expenses, bills, recurring schedules, payouts, tax worksheets, and reports you generate.
- Bank data via Stripe Financial Connections — when you connect a bank, Stripe provides transactions and balances on a read-only basis so we can show the feed and reconcile it. We do not receive bank login credentials. Stripe handles the bank login; we store account identifiers, balances, transaction lines, and status needed for bookkeeping.
- Square — if you connect Square, we receive location, payment, and related sales data so those deposits can be reconciled against your books.
- QuickBooks Online — if you connect QuickBooks, we receive OAuth tokens and import customers, vendors, accounts, invoices, sales receipts, payments, expenses, and bills. We store company identifiers (including realmId), entity ids, and sync tokens so import can be re-run without duplicating records. We do not import payroll.
- Uploaded files — receipts, statements, and other documents you attach to records.
- Usage and technical data — IP address, browser or device type, timestamps, and basic logs needed to operate and secure the Service.
2. Why we use information
We use this information to provide bookkeeping and bank reconciliation for that customer’s company only — invoicing, receipts, expenses, accounts, payments, payouts, tax-oriented reports, and the assistants described below. We also use it to authenticate users, enforce company-level access, send transactional email you request (invoices, receipts, invites), and protect the Service.
We do not use one company’s books, bank feed, or files to serve another company.
3. Processors
We use these processors to run the Service. They handle data only as needed for the roles below:
- Stripe — card and ACH charges, saved payment methods, payouts, webhooks, and Financial Connections (read-only transactions and balances).
- Supabase — database and authentication. Application data is stored with row-level security scoped to your company.
- Vercel — application hosting.
- Anthropic — the AI assistant. Prompts are redacted on-device before they are sent. Tax worksheets and TIN data are excluded from those prompts.
Optional connections you turn on (QuickBooks Online, Square, email delivery) are also processors for the data those connections require. Your use of those products is subject to their terms.
4. No selling or sharing
We do not sell personal information. We do not share your books, bank data, or files for advertising or with other customers. We share information only with the processors above, teammates you invite to that company (according to their role), your customers when you send them an invoice or pay link, and authorities when required by law or to address fraud, abuse, or a security threat.
5. Security, encryption, and backups
We use encryption in transit and at rest (including encrypted tokens for connected services) and company-scoped access rules. We keep backups for 7 days. No method of transmission or storage is completely secure.
6. Disconnecting and deleting data
You can disconnect Stripe, the bank feed, Square, or QuickBooks in Settings. Disconnecting revokes our access tokens; imported or synced bookkeeping records stay in your Book Keeper company until you delete them there. Disconnecting does not delete your Stripe, Square, or QuickBooks account.
You can edit or delete many records in the app. To request deletion of an account or company data we hold, email igor@bodymindsystems.com. We may need to verify your identity and may retain limited information when required by law or while a payment is still settling.
7. Children’s privacy
The Service is for businesses and authorized adults. It is not directed to children under 13, and we do not knowingly collect personal information from them.
8. International users
The Service is operated from the United States. If you access it from another country, you understand information may be processed in the United States.
9. Changes
We may update this Privacy Policy from time to time. The effective date above will change when we do. Continued use of the Service after an update constitutes acceptance of the revised Policy.
10. Contact
Questions about this Privacy Policy: igor@bodymindsystems.com
Right Intent SI LLC, operator of Book Keeper