Draft — pending legal review
VALUEBOOKS · EINSBRAND DIGITAL
Privacy Policy & Data Deletion
How ValueBooks handles information needed to provide accounting software, and how to ask us about it.
ValueBooks is a product of EinsBrand Digital. This draft is published for transparency while its final legal wording is under review.
Information we handle
ValueBooks handles account and profile information; organization, accounting, and financial records; uploaded attachments; audit-log entries; and records needed to send transactional emails. We use this information to provide, secure, support, and improve the service for the organization that authorized access.
Storage and service providers
Product records are stored in a PostgreSQL database. Attachments and generated document artifacts use S3-compatible object storage. Email delivery is handled through an SMTP-compatible provider. Production hosting and provider locations may vary; this globally intended service does not make a data-residency promise in this draft.
Retention
We retain information while it is needed to operate the service, meet accounting, security, and legal obligations, or resolve disputes. The applicable retention schedule and post-termination handling remain pending legal review. AI-run metadata is separately subject to a configured retention policy; prompts and responses are not stored in those records.
AI processing
AI features are off by default. In private mode, ValueBooks sends requests only to an operator-provisioned, DeepSeek-compatible endpoint; the operator chooses that endpoint and its location, so private mode is not a blanket data-residency promise. Hosted mode is not enabled for any organization and would require a per-organization opt-in before report data left ValueBooks for DeepSeek’s hosted API.
If hosted mode is ever enabled, the supported capabilities send capped report cells and totals that the user is authorized to view, together with the user’s question. They do not send attachment bytes, OCR text, authentication material, database credentials, or another organization’s data.
Open AI-review points
- DeepSeek’s then-current hosted-service retention, training, subprocessors, and breach terms.
- Per-organization jurisdiction and data-residency assessment.
- The lawful basis and consent-capture process for hosted AI.
- Whether the current capped report context is sufficient data minimization.
- Hosted-mode retention and accountability, including who may enable or revoke egress.
Your choices, requests, and deletion
You may ask about access, correction, export, deletion, or restriction of personal information by contacting contact@valuebooks.co. Account and organization deletion requests are reviewed with the authorized organization and may be limited by legal, accounting, security, or dispute-resolution obligations. We will explain any information that must be retained and the next available deletion step.