Privacy Policy

Account information. Your name, email address, password (stored hashed by our authentication provider — we never see it), the name of your business or firm, your role, and the two-factor authentication factor you enroll.

Your books. What you put into Bedrock 360: bank statement files and the transactions in them, your chart of accounts, journal entries, payees, receipts, reconciliations and business details. This can include information about other people, such as your customers, vendors or employees.

Billing information. Payments are handled by Stripe. Your card details go directly to Stripe and never touch our servers. We receive your Stripe customer ID, plan and subscription status, and the card brand, last four digits and expiry date so we can show them on your billing page.

Usage and security records. Sign-in and security events (including IP address and browser details), and an activity log of changes made in your books so your team can see who did what.

We use only the cookies and browser storage needed to keep you signed in securely and remember your settings. We don't use advertising or analytics cookies, and we don't track you across other sites.

• to provide Bedrock 360 and keep your books working;
• to secure accounts — two-factor sign-in and spotting suspicious activity;
• to bill your subscription;
• to send service emails, such as confirmations, team invitations, password resets and billing notices;
• to answer support requests and fix problems;
• to meet legal obligations.

We don't sell your personal information, don't use your books for advertising, and don't share personal information for cross-context behavioral advertising.

Only the service providers that run Bedrock 360 for us, each under contract:

• Stripe — payment processing and the billing portal;
• Supabase — database, sign-in and file storage;
• Vercel — hosting the application;
• Resend — delivering our emails.

People you invite to your account can see the businesses their role gives them access to. We may also disclose information if the law requires it, to protect our rights or users, or as part of a merger or sale of our business (in which case this policy continues to apply).

We keep your information while your account is open. If your subscription ends, your books stay stored so you can resubscribe, until you ask us to delete them. Deleted data leaves our backups as they expire. We keep billing records as long as tax and accounting law requires.

Data is encrypted in transit. Each business's data is isolated by access controls enforced in the database, sign-in requires two-factor authentication, and card data never reaches our servers. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

You can view and update most of your information in Bedrock 360, and can ask us to access, correct, export or delete your personal information by emailing support@bedrock360accounting.com from your account's email address. We'll confirm the request comes from you before acting on it.

California residents have the right to know what personal information we collect and how we use it, to delete and correct it, to opt out of its sale or sharing (we don't sell or share it), and not to be discriminated against for using these rights. Residents of other states with similar laws have similar rights, and can use them the same way.

Bedrock 360 is a business service for adults. We don't knowingly collect personal information from children under 13.

We are based in the United States. Our service providers may process information in the United States and other countries where they operate.

We'll post any changes here and update the date above. If a change is material, we'll tell you by email or in Bedrock 360 first.

Bedrock Business Builders Corp · support@bedrock360accounting.com. See also our Terms of Service.