booked. is an accounting platform for bookkeeping and accounting firms, operated by booked accounting (“booked.”, “we”, “us”). This policy covers app.bookedplatform.com, the booked. client portal, the booked. Chrome extension, the booked. connector for Claude, and this website.
Who this applies to
- Firms and their staff who use booked. (“you”). Your firm is our customer.
- Your firm’s clients, whose books your firm keeps in booked. Your firm decides what goes into booked. and why, and we process that data on your firm’s behalf. Questions about it should go to the firm first.
- Visitors to this website.
What we collect
- Account information: your name, email address, firm, role, and sign-in records (time, method and IP address). Passwords are handled by our sign-in provider, WorkOS. We never see or store them.
- Your firm’s accounting data: what your firm puts into booked., including client details, bank and card statements, transactions, charts of accounts, journal entries, invoices, customers and vendors, employees and contractors, documents, notes, and your team’s conversations with Penny, the AI accountant inside booked.
- Connected accounts: if your firm connects them, bank feeds (through Plaid), Google (Gmail and Drive), Stripe and payroll. We store the access tokens these services issue, encrypted. We don’t store your passwords for them.
- Usage and technical data: features used, errors, and an audit log of changes in your firm (who did what, and when).
- Website visitors: if you join the waitlist, your name, email address, firm and anything you choose to tell us.
How we use it
- To provide booked.: keeping books, preparing reports, sending the emails you approve, and running the automations you set up.
- To run Penny, who reads your firm’s data to do the work you ask for.
- To secure the service, prevent abuse and keep an audit trail.
- To help you when you contact support.
- To tell you about changes to booked. You can opt out of anything that isn’t essential.
We do not sell personal information. We do not use your books, documents or conversations to train AI models, and our AI provider’s terms don’t allow it either.
The booked. Chrome extension
The extension puts Penny and your clients’ documents in Chrome’s side panel. It talks only to app.bookedplatform.com, using the booked. sign-in already in your browser. It doesn’t read the pages you visit. On your device it stores only the open conversation and the last client you chose, so they survive Chrome rebuilding the panel.
The booked. connector for Claude
- You sign in with your booked. account. Claude gets access only to what your booked. login can reach, in your firm only.
- When Claude uses a booked. tool, we send the result (for example, a client’s profit and loss) to Claude so it can answer you. From there, Anthropic handles it as part of your Claude conversation, under your agreement with Anthropic and its privacy policy, not this one.
- We record write actions in your firm’s audit log: which tool was used, by whom, and when. Actions that need approval wait in booked. until someone at your firm approves them.
- We don’t store the tokens Claude uses. Each request is checked with WorkOS. You can disconnect at any time from Claude’s connector settings.
Who helps us run booked.
These providers process data only to provide their service to us:
| Provider | What for |
|---|---|
| Render | Application hosting and database |
| Cloudflare | Network security, content delivery and encrypted backups |
| WorkOS | Sign-in and single sign-on |
| Anthropic | The AI models Penny runs on |
| Vercel | Hosting this website |
| Resend | Sending email from booked. addresses, when your firm uses it |
| Gmail and Drive, only if your firm connects them | |
| Plaid | Bank feeds, only if your firm connects them |
| Stripe | Invoice payments, only if your firm turns them on |
We may also disclose information when the law requires it, to protect someone’s safety, or as part of a merger or sale, in which case this policy continues to apply.
How long we keep it
- Statements: uploaded statement files are kept only while a month is open. Once a month is finalized they are removed from working storage. Any archived copy is encrypted and not reachable from the app.
- Books and records: kept while your firm’s account is active. Your firm can delete them. Accounting records often have to be kept for years, which is your firm’s decision.
- After an account closes: we delete or anonymize your firm’s data within 90 days, except where the law requires us to keep it. Backups age out on their normal cycle.
Security
Every firm is a separate tenant, enforced in the database with row-level security. Data is encrypted in transit and at rest, and integration tokens are encrypted. Backups are encrypted, kept off-site and restore-tested. Actions that matter, like finalizing a month, posting an entry or sending an email, wait for a person’s approval. We are on the SOC 2 track.
Your choices and rights
You can view, export (Excel, PDF or Word) and correct your firm’s data in booked. at any time. You can disconnect bank feeds, Google, Stripe and Claude yourself, and their tokens are deleted when you do. Depending on where you live, you may have the right to access, correct, delete or port your personal information, or to object to how it’s used. To ask, email support@bookedplatform.com. If you are one of a firm’s clients, we may refer your request to the firm.
booked. is for businesses and isn’t directed at children under 16.
Changes
If we change this policy in a way that matters, we’ll tell firms by email or in the app before it takes effect.
Contact
booked accounting · support@bookedplatform.com