Privacy Policy

Last updated: March 13, 2026

At Xkeepr, we take the privacy and security of your financial data seriously. This Privacy Policy explains what information we collect, how we use it, and how we protect it. By using Xkeepr, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and login credentials. Your password is securely hashed using industry-standard bcrypt encryption — we never store your raw password.

Business & Financial Data

To provide our bookkeeping services, we collect and process financial documents you upload (invoices, receipts, bank statements), transaction data you enter manually, business name and industry information, and vendor and client names.

Usage Data

We collect information about how you use Xkeepr, including pages visited, features used, and document processing activity. This helps us improve the product and diagnose issues.

Payment Information

Subscription payments are processed by Stripe. We never see or store your full credit card number. We only receive a Stripe customer ID and subscription status.

2. How We Use Your Information

We use your information to provide and improve the Xkeepr service, process your uploaded documents using AI (OpenAI GPT-4o), generate financial reports and insights, send you service-related emails (account alerts, trial reminders, team invitations), and respond to your support requests.

We do not sell your data. We do not use your financial data to train AI models. We do not share your data with advertisers.

3. How We Share Your Information

We share your data only with the service providers necessary to operate Xkeepr:

OpenAIProcesses document images for AI extraction. Data is not retained for training.
Amazon AWSStores your uploaded documents securely in S3 with encryption at rest.
StripeProcesses subscription payments. Subject to Stripe's Privacy Policy.
SendGridDelivers transactional emails (alerts, invitations, reminders).
QuickBooksOnly if you connect your QuickBooks account. You control this connection.

We may also disclose your information if required by law, court order, or to protect the rights and safety of Xkeepr and its users.

4. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS 1.2+
  • Documents are stored in Amazon S3 with AES-256 encryption at rest
  • Access to your account is protected by secure OAuth authentication
  • Session tokens are signed with a secret key and expire automatically
  • Database access is restricted to authorized application servers only

For more details, visit our Security page.

5. Data Retention

We retain your account data and financial records for as long as your account is active. If you cancel your account, we will delete your data within 90 days, except where we are required to retain it for legal or regulatory purposes. Uploaded documents are stored in S3 and can be deleted by you at any time from the Documents History page.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can:

  • Update your profile information in Settings
  • Export your transaction data as CSV from the Dashboard
  • Delete individual documents from Documents History
  • Request full account deletion by emailing [email protected]

If you are located in the European Union, you have additional rights under GDPR including the right to data portability and the right to object to processing. Contact us at [email protected] to exercise these rights.

7. Cookies

Xkeepr uses a single session cookie to keep you logged in. We do not use tracking cookies or third-party advertising cookies. We use basic analytics to understand how users interact with the product — this data is anonymized and not linked to your identity.

8. Children's Privacy

Xkeepr is a business tool intended for users aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the application. Your continued use of Xkeepr after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]

Website: xkeepr.com