buksoDRAFT — not lawyer-reviewed; for lawyer review before launch
US Privacy Notice and Notice at Collection
Bukso Technologies Corp., operating as Ai Book Sort / Bukso, provides bookkeeping software from Calgary, Alberta, Canada. This section supplements Privacy for US residents. State privacy laws have different applicability conditions; where a law applies, we honor its rights. We also accept requests under our general Privacy Policy.
We collect information directly from you, a business/accounting firm authorized to submit it, your browser/service activity and payment/service providers. We use it to deliver requested bookkeeping, administer accounts/payments, respond to support, secure the service and meet legal duties. Optional marketing needs a separate choice.
| Category | Examples / purpose | Retention period or criteria |
|---|---|---|
| Identifiers/account/contact | Name, business details, email, account ID, sign-in information; account administration/authentication | While active; ordinary profile data deleted within 30 days after closure except documented legal/security/dispute needs. Inactive details reviewed after a year without a paid order/plan and deleted or anonymized when unnecessary. |
| Commercial/billing | Orders, plan, payment references, charges/refunds; billing/tax/disputes | Our invoice/tax records normally six years from relevant tax-year end, longer if required by law/legal hold. Full card data is held by Stripe, not Bukso. |
| Uploaded financial documents / derived data | Statements, receipts, descriptions, amounts, categories/corrections; draft books | PAYG without storage: next sign-in after first download or 24h after that download, whichever earlier. Member books/reports: while paid, up to six years from upload. Member originals: only selected source-storage period. Firm originals: selected period, normally 90 days after the relevant month is exported. After a plan ends: 30 days free read-only, then deletion unless separately chosen archive/storage applies. Your account shows the applicable deadline. |
| Internet/device/security activity | IP addresses where received by hosting/security logs, browser/device details, sign-ins/audit events; fraud/security/service operation | Normally no more than two years, longer only for documented legal/security needs. Optional visit measurement is described in Cookies. |
| Communications/preferences | Support messages, consent/unsubscribe; support and evidence of choices | Support messages while needed to resolve/document the issue, then reviewed for deletion; dispute evidence for applicable legal/claim period. Consent evidence while relied on and as needed to show compliance afterwards; minimal suppression record to honor opt-outs. INTERIM: waitlist consent-record backend not yet verified live. |
| Sensitive information in documents | Financial-account details; credentials in sign-in systems; incidental sensitive facts | Only as needed to provide/secure requested service, not advertising/profiling. Apply document/account schedules above. Do not submit unrelated sensitive information. |
Payroll collection is not offered until separately made available with an updated collection notice. Do not submit employee payroll records or social security numbers for a feature not offered.
Recipients
We disclose necessary information to providers on Service Providers, including Render hosting/storage, Stripe payments and any confirmed email provider. We may disclose where law requires, for security/fraud investigation or a lawful business transfer with applicable protections. Firms uploading client information have their own responsibilities; we process their client data under instructions and law. Documents/transaction lines do not go to outside AI providers.
Locations
Account information, books and encrypted files are stored on Render in Oregon, USA. Our own AI processes documents on our company-controlled server in Alberta, Canada. Data crosses the US–Canada border. Service Providers and our Privacy Officer explain foreign-processing practices.
No sale / advertising sharing
We do not sell personal information or share it for cross-context behavioral advertising. We do not use sensitive personal information to infer personal characteristics. We do not knowingly sell/share children's information under 16. We explain and provide required choices before any future change.
Rights
Depending on applicable law, you may request knowledge/access, correction, deletion or a portable copy; opt out of sale, advertising sharing, targeted advertising or certain profiling if performed; limit certain sensitive-information uses; or appeal a denial where law provides an appeal. We do not currently sell or use data for cross-context advertising, so no such use needs opting out today. We honor applicable legally recognized browser opt-out signals for covered processing. We do not unlawfully discriminate for exercising privacy rights.
How to contact us
Contact support@aibooksort.com, subject US privacy request, or Privacy Officer (mailing address in Privacy). Tell us your state/request, not a password or full financial-account number. We verify identity proportionately. Authorized agents may act with proof of authority and applicable verification. For CCPA-covered requests we normally acknowledge within 10 business days and respond within 45 calendar days; we explain a permitted extension within the initial response period. Other state deadlines vary. We explain refusals, exceptions and available appeal routes. We may retain information required by law or permitted security/dispute purposes. For firm-uploaded data we may coordinate with the firm without removing rights against Bukso.
DRAFT — not lawyer-reviewed (FTC / state UDAP / CCPA counsel must review). Applicability-qualified notice — not a claim Bukso meets every CCPA threshold. Not final.