Privacy Policy
Last updated: July 14, 2026
SlimBooks (“we,” “us”) is a bookkeeping app for freelancers and small businesses, operated by Indie CFO LLC. This policy explains what information we collect, how we use it, and the choices you have. We’ve tried to keep it in plain English.
What we collect
Account information. Your email address and sign-in identities, used to authenticate you. If you sign in with Google or Apple, we receive your email and basic profile information from that provider. Authentication is handled by Supabase.
Transaction data. The bookkeeping records you create in SlimBooks — date, description, amount, and category. Transactions enter the app three ways: you type them in, you import a CSV file from your bank, or you connect a bank account (see the next section).
Bank account connections (Plaid). If you choose to link a bank account, we use Plaid to connect to your financial institution. Through Plaid we receive your institution’s name, the names, types, and last four digits of the accounts you choose to share, account balances, and transaction history (dates, amounts, descriptions, and categories). We never see or store your bank username or password — you enter those directly with your bank inside Plaid’s secure interface. Plaid provides us an access token, which we encrypt (AES-256-GCM) before storing. You can read how Plaid handles your data in Plaid’s End User Privacy Policy. Linking a bank is optional and requires your explicit consent in the app; you can disconnect a bank at any time in Settings, which revokes our access at Plaid.
Payment information (Stripe). Paid subscriptions are processed by Stripe. When you subscribe, checkout and billing management happen on Stripe’s own pages — your card number never touches SlimBooks systems. We store only Stripe’s identifiers for your customer and subscription, along with your plan, its price, and your billing status.
Consent records. When you agree to this policy at signup, or authorize a bank connection, we record that consent with a timestamp and the policy version, so we can demonstrate what you agreed to and when.
App settings and technical data. Your in-app preferences (such as theme), and technical details about CSV imports — the file’s name, its column headers, and the column choices made during import — that help us improve the importer and are stored without any link to your account.
We do not use advertising trackers, third-party analytics services, or tracking cookies, and we do not collect information beyond what’s needed to provide the service.
How we use your information
To authenticate your account, store and categorize your transactions, sync transactions from banks you’ve connected, generate your tax reports, process your subscription, provide support, and keep the service secure. That’s it.
Who we share it with
We do not sell, rent, or trade your personal information — to anyone, ever.
We share data only with the service providers that operate SlimBooks on our behalf, each limited to what their role requires:
- Plaid — connects to your bank when you choose to link an account
- Stripe — processes subscription payments
- Supabase — hosts our database and authentication
- Vercel — hosts our website and API
We may also disclose information if required by law, or to protect the rights, safety, or security of SlimBooks and its users.
How we protect it
All data is encrypted in transit (TLS 1.2 or better) and at rest. Bank access tokens receive an additional layer of application-level encryption (AES-256-GCM) before storage. Our database enforces row-level security, meaning your account can only ever access your own records. Access to our production systems requires multi-factor authentication.
How long we keep it, and how to delete it
We keep your data while your account is active. You’re in control of deleting it:
- Individual transactions can be deleted in the app at any time.
- Bank connections can be disconnected in Settings, which revokes our access at Plaid and deletes the stored connection. Previously imported transactions stay unless you delete them.
- Your entire account can be deleted from Settings in the app or from our website. Account deletion cancels any active subscription, revokes and deletes all bank connections, and permanently removes your transactions, consent records, and account. If you have an active subscription, you can choose to delete immediately or at the end of your billing period.
Deleted data ages out of our encrypted backups within 7 days. Stripe retains records of past payments as required for financial recordkeeping under its own retention policy.
Your rights
You can access, export, correct, and delete your data directly in the app. Depending on where you live, you may have additional rights under local privacy law; to exercise any right or ask a question, email us at gustavo@getslimbooks.com and we’ll respond in line with applicable law. We’ll never treat you differently for exercising a privacy right.
Children
SlimBooks is not intended for anyone under 13. We don’t knowingly collect information from children; if we learn we have, we’ll delete it.
Changes to this policy
When we change this policy, we’ll update the date at the top. For material changes — like collecting a new category of data — we’ll notify you in the app before the change takes effect.
Contact
Questions about privacy & security issues: