Introduction
At Bookkeeping CLI (operated by Happenings Group A/S), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
We are committed to protecting your personal data and being transparent about what information we collect and how we use it. Please read this policy carefully to understand our practices.
Information We Collect
We collect information in the following ways:
• Account Information: When you create an account, we collect your name, email address, and password.
- Payment Information: When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card details.
- Usage Data: We collect information about how you use our service, including API call counts and feature usage.
- Technical Data: We may collect your IP address, browser type, and device information for security and analytics purposes.
- Communications: If you contact us, we may keep a record of that correspondence.
Information We Do NOT Collect
Our service is built with a local-first, privacy-focused architecture. We explicitly do NOT collect or have access to:
• Your financial data from your accounting software
- Your invoices, contacts, products, or transactions
- Your accounting software API responses
- Any data that flows between your AI assistant and accounting software
Your accounting data flows directly between your AI assistant and your accounting software provider. We never see, store, or process this data.
API Keys and Credentials
When you connect your accounting software, you provide API keys or credentials. Here's how we handle them:
• Your Bookkeeping CLI API key is stored encrypted in our database
- Your accounting software API keys are stored locally on your machine in the MCP server configuration
- We never transmit your accounting software credentials to our servers
- The MCP server runs locally and communicates directly with your accounting provider
How We Use Your Information
We use the information we collect to:
• Provide and maintain our service
- Process your subscription and payments
- Send you important service updates and notifications
- Respond to your inquiries and support requests
- Monitor and analyze usage patterns to improve our service
- Detect and prevent fraud or abuse
- Comply with legal obligations
Data Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
• Service Providers: We use Stripe for payment processing and may use other service providers who assist us in operating our service.
- Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
- Business Transfers: If we are involved in a merger or acquisition, your information may be transferred as part of that transaction.
- With Your Consent: We may share information with third parties when you give us explicit permission.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to:
• Comply with legal obligations
- Resolve disputes
- Enforce our agreements
If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
• Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Regular security assessments and updates
- Access controls limiting who can access your data
- Secure hosting infrastructure
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Rights
Under GDPR and other applicable privacy laws, you have the following rights:
• Access: You can request a copy of the personal data we hold about you.
- Rectification: You can ask us to correct inaccurate or incomplete data.
- Erasure: You can request that we delete your personal data.
- Restriction: You can ask us to restrict processing of your data.
- Portability: You can request your data in a machine-readable format.
- Objection: You can object to certain processing of your data.
To exercise these rights, please contact us at support@happenings.dk.
Third-Party Services
Our service integrates with third-party services. Each has their own privacy policies:
• Stripe: Handles payment processing. View their privacy policy at stripe.com/privacy
- Your Accounting Software: Billy, Dinero, or e-conomic each have their own privacy policies governing their services.
- AI Assistants: Claude (Anthropic) and ChatGPT (OpenAI) have their own privacy policies for how they handle conversations.
We encourage you to review the privacy policies of these third-party services.
Children's Privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that any such transfers comply with applicable data protection laws and that your information remains protected.
For transfers from the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
• Posting the new policy on our website
- Updating the "Last updated" date
- Sending an email notification for significant changes
Your continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Happenings Group A/S CVR: 40979956 Email: support@happenings.dk
For GDPR-related inquiries, you may also contact your local data protection authority.