Privacy Policy

Last updated: {{DATE}}

Who We Are

LymeBooks is operated by Interapp Development, Inc. ("we", "us", "our"). This policy explains how we handle your data on the lymebooks.com website and in the LymeBooks application.

Data We Collect

Account and bookkeeping data

When you use the LymeBooks application we store the data you enter: your business details, transactions, documents you upload, the people you invite, and settings. We use it only to provide the service. Documents you upload may be read by an AI model so we can fill in their details. Where that model runs depends on your account. If your account uses AI included by LymeBooks, the processing happens on hardware we operate, and your documents are not sent to any outside AI provider. If you connect your own AI provider in your settings, the documents and the transaction details needed for a suggestion are sent to that provider, and its own terms govern what it keeps and how it uses them. We do not control a provider you choose, so review its data retention and training terms before you connect it. AI features are optional. We keep your data while your account is active and for 90 days after it is archived, then delete it. We back it up nightly; backups are kept for a limited period and then deleted.

Payment data

Payments are processed by Paddle.com Market Ltd, our merchant of record. We never see your card number. Paddle's privacy policy applies to the payment itself.

Email

We send transactional email (invitations, trial and billing notices) through our own mail service. We do not share your address with advertisers.

Early-Access Requests

When you request early access or beta access through the form on our site, we collect:

• Email address — to contact you about your request and the beta
• Company name (optional)
• Current system — what you use for bookkeeping today (optional)
• Approximate monthly transactions (optional)
• Hosted or downloadable interest — whether you want the cloud or self-hosted version (optional)
• IP address hash — a one-way cryptographic hash of your IP address, used solely for spam prevention. We do not store your actual IP address.
• Timestamp — when you submitted the request
• Consent — your agreement to receive updates about LymeBooks

Anonymous Analytics

We collect privacy-friendly, cookie-free analytics to understand how visitors use our site:

• Page path — which page was viewed
• Visitor hash — a one-way cryptographic hash of your IP address, browser user-agent, and the current date. This allows us to count daily unique visitors without identifying you. The hash changes daily, preventing long-term tracking.
• Referrer — the page that linked you here
• Timestamp — when the page was viewed

We do not use cookies, tracking pixels, or any third-party analytics services.

How We Use Your Data

• Early-access request details are used to review your request, to contact you about the beta, and, if you consented, to send you LymeBooks product updates.
• Analytics data is used in aggregate to understand traffic patterns and improve the website.

Support access. Our support staff can open your books only to answer a support request or to investigate a problem. Each visit is recorded (who, when and why) and listed for you in Business Settings, under Support access. When someone from our team who isn't already part of your company opens your books, the account owner is emailed each time.

Third-Party Sharing

We never sell your data or share it with advertisers. We share it only with the service providers that run LymeBooks for us, under agreements that limit them to that purpose:

• Paddle.com Market Ltd — payments, tax and invoices (merchant of record)
• Microsoft Azure — hosting, in the United States
• Stripe — online invoice payments, when a business connects its own Stripe account to accept card or bank payments
• Twilio — text messages for rental property reminders, sent only to renters who have agreed to receive them
• Email — we send transactional email through our own mail service

When you connect a service yourself, such as an AI provider or a payment account, we send it the data that service needs to work for you. That service acts under your agreement with it, not ours.

We may also disclose data when the law requires it.

Data Retention

• Early-access requests are retained until you request deletion or unsubscribe.
• Analytics data is retained for up to 12 months, then automatically deleted.

Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Deletion — request that we delete your data
• Withdraw consent — unsubscribe from emails at any time

To exercise these rights, contact us at {{SUPPORT_EMAIL}}.

Data Controller

Interapp Development, Inc. is the data controller for the purposes of GDPR and applicable data protection laws.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.