Privacy Policy
What we collect, why, who we share it with, and the choices you have. No selling, no ad tracking.
The short version.
- We collect what we need to run your books, your practice and your account, and nothing for advertising.
- We do not sell personal information, and we do not share it for targeted advertising.
- Our websites use no analytics, advertising pixels or tracking cookies.
- Your data is stored in the United States on Microsoft Azure and is not used to train AI models.
- You can update your account information in the app and unsubscribe from marketing email at any time.
1. Who we are and what this policy covers
Accountant Inc. (“we,” “us”) is an Oregon corporation based in Portland, Oregon. This policy explains how we handle personal information through KikoBooks, Accountant.World, Agent Kiko, the KikoBooks MCP server and our websites (kikobooks.com, accountant.world and agentkiko.com) (the “Services”). The Services are offered only in the United States.
We handle personal information in two roles:
- For our customers. Businesses and accounting firms put records about their own customers, vendors, clients and employees into the Services. We process that information only on their behalf and as they instruct, under our Terms of Service. If you are one of those people, the business or firm that holds your record decides how it is used; contact them first, and we will help them respond.
- On our own behalf. We decide how to use account, billing, support and website information about the people who sign up for and use the Services. This policy describes that use.
2. Information we collect
- Account information: name, email, phone number, organization, role, and sign-in credentials (we store passwords only in hashed form).
- Business and financial records you put in the Services: chart of accounts, transactions, invoices, bills, payments, customer and vendor contacts, payroll summaries, documents and receipts you upload, and notes. These can include personal information such as names, addresses and, where you choose to enter it, taxpayer identification numbers.
- Information from services you connect: bank and card account details and transactions through Stripe Financial Connections, along with data from QuickBooks, Gusto, BILL, Brex, Ramp, Stripe, and sales channels such as Amazon and Shopify. We receive only what you authorize. We never receive or store your bank login credentials.
- Communications: emails Kiko sends and receives for your organization, and, for calls Kiko places, call recordings (unless your organization turns recording off), transcripts and call details.
- AI activity: the requests you give Kiko, its suggestions and actions, and the approvals or rejections recorded in your organization’s audit trail.
- Billing information: plan, invoices and payment status. Card details are entered directly into Stripe’s forms. We never see or store full card numbers.
- Technical information: IP address, browser and device type, and security and error logs, which we use to keep the Services working and secure.
- Support: what you tell us when you contact us.
3. How we use information
- to provide the Services you request, including bookkeeping, practice management, Kiko’s AI assistance and the communications you direct;
- to secure accounts, prevent fraud and abuse, and keep audit trails;
- to bill you and to provide support;
- to send service and account notices, and occasional product news you can unsubscribe from at any time;
- to fix problems and improve the Services, using aggregated or de-identified information where we can;
- to comply with law and enforce our Terms.
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use your organization’s records to train AI foundation models.
4. AI processing
Kiko uses Microsoft Azure AI services, including Azure OpenAI, Azure AI Search and Azure Document Intelligence. They process your information to answer questions, read documents, propose entries and hold voice conversations. Microsoft processes this data under its enterprise commitments for Azure and does not use it to train its models. Kiko’s suggestions and actions are recorded in your organization’s activity history so you can review them.
5. How we share information
We share personal information only as described here.
Service providers that run parts of the Services for us, under contracts that limit their use of the data:
| Provider | What they do |
|---|---|
| Microsoft Azure | Hosting, databases, file storage, AI services, and outbound voice calls (Azure Communication Services). Located in the United States. |
| Twilio SendGrid | Sending and receiving email for the Services. |
| Stripe | Subscription and wallet payments, and bank and card connections through Stripe Financial Connections. |
| Google (Firebase Hosting, Google Fonts) | Hosting our marketing websites and serving their fonts. |
We also share personal information:
- With services you connect. When you link QuickBooks, Gusto, BILL, Brex, Ramp, a sales channel or a similar service, we exchange data with it as you direct.
- Within your organization and with your accountant. People you invite see information according to the roles you give them. If you invite an accounting firm, or a firm invites you, the firm’s staff can see what you share with them.
- With the people Kiko contacts for you. They receive the messages and calls you direct.
- For legal reasons. To comply with law or valid legal process, to protect rights and safety, or to investigate fraud or security issues.
- In a business transfer. If Accountant Inc. is involved in a merger, acquisition or sale of assets. The information remains subject to this policy.
6. Cookies and similar technologies
- Our websites (kikobooks.com, accountant.world, agentkiko.com) set no cookies and use no analytics, advertising pixels or session replay. They load fonts from Google Fonts, and agentkiko.com also loads icons from jsDelivr. Those providers receive your IP address when your browser fetches the files.
- The app keeps your sign-in session and display preferences in your browser’s local storage. These are strictly necessary for it to work. Billing pages load Stripe’s scripts, which may use cookies for fraud prevention under Stripe’s privacy policy.
- Because we don’t track you across sites, there is nothing for a “Do Not Track” or Global Privacy Control signal to switch off.
7. Where data is stored
We store and process data in Microsoft Azure data centers in the United States. The Services are intended for U.S. businesses only.
8. Security
Each organization’s data is isolated and every request is checked against its permissions. Data is encrypted in transit with HTTPS and encrypted at rest. Application secrets are kept in Azure Key Vault, and sign-in tokens are encrypted before they are stored. Access follows least privilege, and posted ledger entries are kept as an unalterable audit trail. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as U.S. state law requires. More on our Security page.
9. How long we keep information
- While your account is active, we keep your information for as long as your organization uses the Services.
- After your account closes, we delete or de-identify your organization’s data. Export anything you need before you close your account.
- What we keep longer: records we must retain by law (for example, billing and tax records), information needed to resolve disputes or enforce our agreements, and security logs.
- Backups expire on their normal rotation.
- Posted accounting entries are designed to be permanent while the organization exists. Corrections are recorded as new entries, not edits.
10. Your choices
- Account information. You can review and update your profile in the app. Your organization’s administrators can update or remove users.
- Marketing email. Every marketing email includes an unsubscribe link. Service and account notices continue while you have an account.
- Connected services. You can disconnect a connected service at any time in the app.
- Records held by a business or firm. If a business or accounting firm that uses our Services holds your information, contact them about it.
Questions about this policy: info@accountant.world.
11. Children
The Services are for businesses and professionals and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
12. Accounting firms and financial-privacy rules
Accounting and tax firms can be “financial institutions” under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule. When a firm uses the Services, we act as its service provider. We protect client information with the safeguards described in this policy and on our Security page, and we use it only to provide the Services to the firm.
13. Changes to this policy
We will post any update here with a new effective date. If we make a material change to how we use personal information, we will notify account holders by email or in the product before it takes effect.
14. Contact
Accountant Inc., Portland, Oregon, U.S.A. · info@accountant.world