PRIVACY POLICY
Effective Date: January 1, 2025
Last Updated: January 1, 2025
1. INTRODUCTION
Welcome to Baifokal ("we," "us," "our," or "Baifokal"). We respect your privacy and are committed to protecting your business information while maintaining transparency about how we use aggregated data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our application.
2. INFORMATION WE COLLECT
2.1 Accounting System Connection
To provide our Services, you must:
- Be an authorized administrator of your accounting system
- Provide accounting system credentials (API keys, OAuth tokens, or login credentials)
- Grant authorization to access your accounting system data
- Select which accounting system(s) to connect
- Maintain valid administrative access throughout your use of the Service
Security Requirements:
- Never share account passwords
- Never share Two-Factor Authentication (2FA/TOTP) codes
- Never share Passkeys or authentication credentials
- Maintain exclusive control of all authentication methods
2.2 Business Information from Accounting Systems
Through your accounting system connection, we collect:
- Business Classification Data: NAICS Code and Business Type
- Business Metrics: Revenue Band and Employee Counts
- Location Data: City and/or State location of your business
- Accounting Method: Whether you use Cash or Accrual basis accounting
- Financial Data:
- Complete chart of accounts and account naming conventions
- Transaction history with your categorizations
- Customer identifications (including Clients, Jobs, Projects, Revenue Sources as named in your system)
- Vendor identifications and classifications
- Expense categories and amounts
- Cost of Goods Sold (COGS) metrics
- Revenue streams
- Financial statements data
- Other financial performance indicators
- Operational Data: Key business ratios and performance metrics calculated based on your accounting method
2.3 Account Information
- Business name (non-personally identifiable)
- Business email address
- Account credentials (username and encrypted password)
- Account preferences and settings
2.4 Automatically Collected Information
- Log data (IP addresses, browser type, operating system)
- Device information
- Usage data (features used, time spent on App, click patterns)
- Cookies and similar tracking technologies
- API call logs and sync history with accounting systems
2.5 What We DO NOT Collect or Share as PII
We do not collect or share personally identifiable information (PII) such as:
- Individual names of employees or customers
- Personal addresses
- Social Security numbers
- Personal financial information
- Personal contact information
- Individual customer or vendor details
3. HOW WE USE YOUR INFORMATION
3.1 Provide and Improve Services
- Connect to and sync with your accounting system
- Calculate and display key business ratios and metrics
- Generate industry benchmarks and comparisons
- Generate AI-powered summaries and commentary about your business performance
- Provide analytical insights and reports
- Store your past commentaries, reports, and data to enhance ongoing reporting
- Monitor accounting system connection health
- Improve App functionality and user experience
3.2 AI Processing and Historical Data
We use your information to:
- Generate personalized insights using AI technology
- Create summaries and commentary tailored to your business
- Store historical analyses to track trends over time
- Improve future reporting by learning from your past data patterns
- Enhance AI models using anonymized, aggregated patterns
- Note: Company identifiable information is never sent to external AI systems
3.3 Commercial Use of Statistical and Aggregated Data
We retain the right to use aggregated and anonymized data for commercial purposes, including:
- Creating and selling industry benchmark reports
- Developing commercial analytical products and services
- Licensing aggregated data to third parties
- Publishing market research and industry insights
- Creating proprietary indices and performance metrics
- Developing predictive models and analytical tools
3.4 Communication
- Send service-related notifications
- Alert you to accounting system connection issues
- Provide customer support
- Inform you about new features or services
- Send optional marketing communications (with your consent)
4. HOW WE SHARE INFORMATION
4.1 Commercial Use of Statistical Data
We may commercialize anonymized and aggregated statistical information including:
- Industry-wide expense and COGS metrics by category
- Benchmarking data by NAICS code, revenue band, or geographic region
- Aggregated key performance indicators and ratios
- Market trends and analytical insights
- Financial performance distributions and percentiles
This statistical data:
- Never identifies individual businesses
- Is aggregated from multiple sources to ensure anonymity
- Becomes the property of Baifokal
- May be sold, licensed, or otherwise commercialized
- Is used to enhance calculation and comparison capabilities for all users
4.2 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Cloud storage and hosting services
- Accounting system API integrations
- Analytics and performance monitoring
- Customer support services
- Payment processing
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.3 Legal Requirements
We may disclose information if required to:
- Comply with legal obligations
- Respond to valid legal requests
- Protect our rights, property, or safety
- Prevent fraud or security issues
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information, including our rights to aggregated data, may be transferred to the acquiring entity.
5. DATA SECURITY
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Secure storage of accounting system credentials
- Regular security assessments and audits
- Access controls and authentication mechanisms
- Secure API connections to accounting systems
- Regular backups and disaster recovery procedures
- Employee training on data security
However, no method of transmission over the internet or electronic storage is 100% secure. You acknowledge that providing accounting system credentials carries inherent risks.
6. DATA RETENTION
6.1 Individual Business Data
We retain your individual business information for as long as:
- Your account remains active
- Necessary to provide you with our services
- Required to comply with legal obligations
6.2 Aggregated Data
Aggregated and statistical data created from your information is retained indefinitely and remains the property of Baifokal even after account termination.
6.3 Deletion Requests
You may request deletion of your account and individual business data at any time. This does not affect aggregated data already created.
7. YOUR RIGHTS AND CHOICES
7.1 Access and Update
You have the right to access and update your business information through your account settings or by contacting us.
7.2 Data Portability
You may request a copy of your individual business data in a structured, commonly used format.
7.3 Deletion
You may request deletion of your account and associated individual business information, subject to legal retention requirements. Previously created aggregated data will not be deleted.
7.4 Accounting System Disconnection
You may disconnect your accounting system at any time through your account settings.
7.5 Opt-Out
You may opt-out of:
- Marketing communications
- Certain optional data analytics features
- New data collection (by disconnecting your accounting system)
Note: Opting out does not affect our rights to previously collected aggregated data.
7.6 Do Not Track
The App does not currently respond to Do Not Track signals.
8. DATA ACCURACY DISCLAIMER AND AI-GENERATED CONTENT
8.1 Data Accuracy
Important Notice: The accuracy of all analytics, reports, and insights provided by Baifokal depends entirely on:
- The accuracy of data in your accounting system
- Your selected accounting method (Cash or Accrual basis)
- The completeness of your accounting records
- Proper and consistent categorization of transactions
- Accurate and consistent naming of accounts
- Correct identification of Customers (or equivalents: Clients, Jobs, Projects, Revenue Sources)
- Proper identification and naming of Vendors
- Regular synchronization with your accounting system
- Correct business classification information you provide
- The structural appropriateness of your chart of accounts
Critical Understanding: Different accounting methods (Cash vs. Accrual) will produce different analytical results. Inconsistent naming or categorization will directly impact the quality and accuracy of insights, benchmarking, and comparative analytics.
We assume no responsibility for inaccuracies resulting from errors, omissions, or inconsistencies in your source data or accounting practices.
8.2 AI-Generated Content
You acknowledge that:
- Summaries, insights, and commentary are generated by artificial intelligence systems
- All AI-generated content is provided "AS IS" without warranty
- AI insights are not a substitute for professional judgment
- Company identifiable information is never shared with external AI providers
- Only anonymized patterns are used for AI processing
- You should independently verify AI-generated insights before making business decisions
8.3 Historical Data Storage
We store your past AI-generated commentaries, reports, and analytical data to:
- Provide trend analysis over time
- Enhance the quality of ongoing reporting
- Personalize insights based on your historical patterns
- Improve the relevance of future AI-generated content
9. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to:
- Maintain your session
- Remember your preferences
- Analyze usage patterns
- Improve App performance
- Track accounting system sync status
You can manage cookie preferences through your browser settings.
10. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in the United States where our servers are located. By using the App, you consent to such transfers.
11. CHILDREN'S PRIVACY
The App is not intended for individuals under 18 years of age. We do not knowingly collect information from children.
12. CALIFORNIA PRIVACY RIGHTS
California residents have additional rights under the California Consumer Privacy Act (CCPA), including:
- Right to know what information is collected
- Right to delete individual business information
- Right to opt-out of sale of information (Note: We sell aggregated, not personal, information)
- Right to non-discrimination
To exercise these rights, contact us via our contact form
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending notification to your registered email (for significant changes)
14. CONTACT INFORMATION
For questions, concerns, or requests regarding this Privacy Policy or your information, please contact us via our contact form
15. ADDITIONAL DISCLOSURES
15.1 European Economic Area (EEA)
If you are in the EEA, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing is legitimate interest in providing business analytics services and developing commercial data products.
15.2 Data Protection
While we do not collect PII, we treat all business information with appropriate security measures as described in Section 5.
15.3 Your Acknowledgment
By using Baifokal, you acknowledge that:
- You have read and understood this Privacy Policy
- You consent to the collection and use of your business data as described
- You understand our rights to commercialize aggregated data
- You accept responsibility for the accuracy of your accounting data
- You have authority to provide access to the accounting system
BY USING THE BAIFOKAL APP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS.