| Category | Examples |
|---|---|
| Account info | Name, email, hashed password (never stored in plain text) |
| Financial data you connect | Transactions, invoices, bills, accounts, customers/vendors, and related records from QuickBooks Online, or from a CSV you import |
| Notes you write | Annotations on transactions, including any you mark "owner only" |
| Usage data | Login activity, basic error logs, which pages/features are used |
A note marked owner-only is restricted at the data layer, not just hidden in the interface: anyone without permission to see it receives no content for that note at all — not a blank field, not a truncated preview, nothing sent to their browser. The same restriction applies before any note reaches the AI assistant, so it cannot paraphrase or reference content it was never given. Only the account owner (or the person who wrote the note) can see it.
We share data only with the service providers that make Bluestem work, each under their own privacy and security commitments — never for advertising, and never sold:
| Provider | Purpose |
|---|---|
| Supabase | Database and storage — where your account and ledger data live |
| Intuit (QuickBooks) | The source of your accounting data, connected via OAuth you control |
| Anthropic (Claude) | Powers the AI narration. Anthropic processes the figures needed to answer a question; per Anthropic's own policy, API data isn't used to train their models |
| Resend | Sends account emails (e.g. password reset) — nothing else |
| Render | Hosts the application |
QuickBooks connection tokens are encrypted at rest. Passwords are hashed, never stored or logged in plain text. Access to a company's data requires an authenticated account with real membership in that company — there is no shared or generic login. We continue to harden the service as it matures; if you notice anything that looks like a security gap, please tell us at cooper@getbluestem.com before reporting it anywhere else, so we can fix it.
We keep your data for as long as your account is active. Financial records are kept in an append-only form — an edit or deletion in QuickBooks is reflected in Bluestem, but the prior version is retained internally as history rather than erased, the same way accounting records normally preserve an audit trail. You can request full account and data deletion at any time by emailing cooper@getbluestem.com; we'll confirm what deletion actually removes for your situation when you ask.
If this policy changes materially, we'll update the effective date above. Significant changes affecting connected clients will be communicated directly.
Privacy questions or requests: cooper@getbluestem.com.