Privacy Policy

1. Who we are

Real Estate Agent Books ("we", "us", or "the Service") is an accounting and bookkeeping application built for real estate agents. This policy explains what information we collect when you use the Service, how we use and protect it, and the choices you have. Questions can be sent to support@reagentbooks.com.

2. Information we collect

• Account information. Name, email address, and authentication credentials, managed by our identity provider (Clerk). We require multi-factor authentication before financial data can be connected.
• Financial account data via Plaid. When you choose to connect a bank account, we use Plaid Inc. ("Plaid") to link your account. Through Plaid we receive account details (institution, account name, type, mask, balances) and transaction history (dates, amounts, merchant names, categories). We never see or store your banking username or password. Plaid's handling of your data is described in the Plaid End User Privacy Policy.
• Documents you upload. Receipts, statements, and related files you add for bookkeeping, and the data extracted from them.
• Accounting integrations. If you connect QuickBooks or Xero, we receive the accounting data needed to sync your books, under those providers' terms.
• Usage data. Log and device information (IP address, browser type, pages viewed) used for security and to operate the Service.

3. How we use your information

• Provide the Service: transaction syncing, categorization, reconciliation, reporting, and tax insights.
• Secure the Service: authentication, MFA enforcement, fraud and abuse prevention, audit logging.
• Communicate with you about your account and the Service.
• Comply with legal obligations.

We do not sell your personal or financial information, and we do not use your financial data for advertising.

4. Consent

We collect and process your financial data only after you explicitly connect an account. The Plaid Link flow presents Plaid's consent screen before any bank connection is made, and you may disconnect a linked account at any time from the application, which stops further collection from that account.

5. How we protect your data

• All data in transit is encrypted with TLS 1.2 or higher.
• Data is encrypted at rest. Sensitive credentials, including Plaid access tokens and accounting-integration tokens, are additionally encrypted at the application layer with AES-256-GCM.
• Access to your data is restricted by per-user authorization checks; multi-factor authentication is required before financial features are enabled.

6. Sharing

We share data only with the service providers required to run the Service — Plaid (bank connectivity), Clerk (authentication), Supabase (database and storage hosting), Vercel (application hosting), and, if you connect them, QuickBooks (Intuit) or Xero — each bound by their own security and privacy obligations. We may also disclose information when required by law.

7. Data retention and deletion

We retain your data only as long as needed to provide the Service and meet legal obligations, as defined in our Data Retention and Disposal Policy. In summary: financial records are retained while your account is active; when you disconnect a bank account, its access token is revoked with Plaid and deleted; and when you delete your account, your personal and financial data is deleted within 30 days, except where a longer period is required by law. To request deletion, use the account-deletion option in Security settings or email support@reagentbooks.com.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights from within the application or by contacting support@reagentbooks.com. We respond to verified requests within the timelines required by applicable law.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the application, and the effective date above will be updated.