Privacy Policy

GAAPToolbox ("we," "our," or "us") respects your privacy. This Privacy Policy describes what information we collect when you use GAAPToolbox, how we use it, and the choices you have. By using GAAPToolbox, you agree to the practices described here.

Account information. When you create an account, we collect your email address and, if you sign in via Google or Microsoft, any profile information those services share with us (typically your name and email).

Client and financial data. When you use GAAPToolbox tools, you enter client names and financial data (lease terms, payment amounts, debt schedules, etc.). This data is stored in your account and is not used for any purpose other than operating the service for you.

Usage data. We may collect standard web server logs including IP address, browser type, pages visited, and timestamps. This information is used solely for operating, securing, and improving the service.

Cookies and local storage. We use cookies and browser local storage to maintain your session. We do not use advertising or cross-site tracking cookies.

We use the information we collect to:

• Provide, operate, and maintain GAAPToolbox;
• Authenticate your identity and protect your account;
• Store and display data you have entered;
• Monitor and improve the performance and security of the service;
• Respond to support requests or inquiries you send us.

We do not sell your data. We do not use your financial data to train machine learning models or share it with third parties for marketing purposes.

We use a limited set of third-party services to operate GAAPToolbox:

• Supabase — provides our database and authentication infrastructure. Data is stored on Supabase-managed servers. Supabase's own privacy policy applies to their handling of infrastructure data.
• Google / Microsoft — if you choose OAuth sign-in, these providers authenticate you. We receive only the profile scopes you authorize.

We do not share your data with any other third parties except as required by law or to protect the rights and safety of users and the service.

We retain your account and client data for as long as your account is active. If you delete your account, your data is deleted from our systems within a reasonable period, subject to any retention required by applicable law.

We implement commercially reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the service at your own risk in this regard.

You may access, correct, or delete the client and financial data stored in your account at any time through the application. To request deletion of your entire account and associated data, contact us using the information below.

If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to data portability and to lodge a complaint with your local supervisory authority.

If you are a California resident, you may have rights under the CCPA, including the right to know what personal information we have collected and the right to request deletion.

GAAPToolbox is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of GAAPToolbox after changes are posted constitutes your acceptance of the revised policy.

If you have questions or requests regarding this Privacy Policy, please contact us at: support@gaaptoolbox.com