Privacy

DRAFT bookkeeping tool — not CPA advice.

AutoBookkeeperAI stores the account you create (email + hashed password), the businesses and accounts you define, and the statement files you upload so we can parse transactions and generate draft reports for you.

Passwords are hashed with PBKDF2 (100k iterations). Session cookies are HttpOnly (and Secure on HTTPS). Logging out deletes the server-side session.
Login and signup are rate-limited (lockout after repeated failures).
Your data is isolated per user account — queries are scoped to the signed-in user.
Uploaded statements live in private object storage (R2) bound to this app. We do not sell your financial data.
Optional AI categorization uses Anthropic only when an API key is configured by the operator; the default production deploy runs rules-only.
A lightweight audit log records security-relevant actions (login, upload, account deletion).

Data deletion policy

You may permanently delete your account and data at any time from the app (Delete my account & data) or by contacting the operator. Deletion:

Removes your user record, sessions, businesses, accounts, transactions, rules, reports, and related D1 rows.
Deletes uploaded statement objects from R2 (and any D1 blob fallback rows).
Is irreversible. We aim to complete self-serve deletion immediately when you confirm; operator-assisted requests within 30 days.

Do not upload anyone else’s statements without permission. This service prepares draft books from the files you provide and is not a substitute for a licensed CPA.