Privacy Policy

The short version

Your business data belongs to you. We process it to run the service, we do not sell it, we do not use it to train AI models, and the free tools on this site run in your browser without uploading what you type. If you connect a bank account, your banking credentials go to your bank via Plaid — never to us.

Who we are

SeroBooks is operated by Sero Technologies (“we”, “us”), the maker of SeroPOS. This policy covers the SeroBooks and SeroPOS applications and this website. Privacy contact: privacy@serobooks.app.

What we collect, and why

Account information you provide — name, email address, business name and address — to create and administer your account, verify your email, and reach you about the service. Business records you create in the product — sales, purchases, products, contacts, ledgers, payroll entries — which exist solely so the product can serve you, and are isolated to your business. Payment statusfor your subscription (handled by our payment processor; we never see or store card numbers). Basic website analytics in aggregate, to understand which pages help. Marketing email is opt-in and every message carries an unsubscribe link.

We collect only what the service needs. We do not collect government identifiers, we do not buy data about you, and we do not sell or rent your data to anyone.

Bank connections (Plaid)

If you choose to connect a bank account for the bank feed and reconciliation features, the connection is made through Plaid. You enter your online banking credentials only in Plaid’s secure interface — your credentials are never visible to, transmitted through, or stored on our systems. We receive and store an access token (encrypted, server-side only, never exposed to apps or logs) and the account and transaction data needed to run the features you connected: importing transactions, categorising them, and reconciling your books.

We use bank data for those bookkeeping features only. You can disconnect a bank account at any time in the product, which revokes the access token. Plaid’s own handling of your information is described in the Plaid End User Privacy Policy.

AI features (Maya)

Maya, the assistant inside SeroBooks, answers questions using your own business data through the same permission system that governs every user — she can only see what the asking user may see, within the business that asked. AI features run only after the business owner enables them and accepts the recorded consents; any action Maya proposes requires explicit human approval and is kept in an audit trail. Your data is not used to train AI models — ours or anyone else’s.

Service providers we rely on

We share data only with processors needed to run the service, each bound by its own terms and data-protection commitments: Microsoft Azure (hosting, storage, transactional email, AI processing), Plaid (bank connections, as above), Stripe (subscription billing — card details go to Stripe, not us), Global Payments / Moneris (in-store card payments — card data stays inside certified payment terminals and never touches our systems), and Twilio (SMS delivery where you use SMS features). Depending on the service, data may be stored or processed in data centres outside your province or outside Canada; wherever it is processed, the safeguards described here apply.

How it is protected

Encrypted transport (TLS) everywhere, encryption at rest on our cloud storage, per-business isolation enforced on every API request, role-based access controls, multi-factor authentication on our administrative systems, and audit trails on financially significant actions — described in depth on the Security page. Access to production systems is restricted to named, authorised personnel. No method of transmission or storage is perfectly secure, but we build so that the sensitive things — bank credentials, card numbers — never reach our systems at all.

If something goes wrong

If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the appropriate authorities as required by law, without undue delay, and tell you plainly what happened and what we are doing about it.

How long we keep data

Account and business data are retained while your account is active. Because SeroBooks holds books of record, financial records are kept as long as tax law requires (Canada Revenue Agency rules generally require six years from the end of the relevant tax year) even after an account closes, unless law permits earlier deletion. Backups roll off on a fixed schedule. Email verification codes expire within minutes and are stored only as hashes.

Your rights and choices

You can access and export your data at any time (built-in exports and the QuickBooks Desktop bridge); correct anything inaccurate in the product; disconnect bank accounts at any time; withdraw consent for optional features (like AI and marketing email) without losing the core service; and request deletion of your account and data via privacy@serobooks.app — honoured promptly, subject to the statutory retention above. We answer privacy requests from real humans. If you are unsatisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.

Cookies and this website

The website uses only the cookies needed to run it and aggregate analytics; the free tools on this site do their work in your browser and do not upload what you type. We do not run third-party advertising trackers.

Children

SeroBooks is business software and is not directed to, or intended for use by, anyone under 18.

Changes to this policy

When this policy changes materially we will tell you — by email or in the product — before the change takes effect, and this page will always carry the current effective date. Continued use after the effective date means the updated policy applies.