Privacy Policy

1. Introduction

Accounting Touch ("Accounting Touch," "we," "our," or "us") provides bookkeeping, accounting support, and financial management services to businesses and to CPA and accounting firms. We are committed to protecting the privacy and security of your personal and financial information.

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you:

• Visit our website, accountingtouch.com
• Contact us, request a quote, or book a consultation
• Engage us for our bookkeeping, accounting, and related services

By using our Website or Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Website or Services. Where we perform Services for you, your engagement agreement or service agreement may contain additional confidentiality terms. If there is a conflict, the signed agreement prevails for the client data covered by it.

2. Information We Collect

2.1 Information you provide to us

• Contact and business details: name, email address, phone number, company name, job title, business address, and country.
• Billing details: billing contact, invoicing information, and payment-related records needed to administer your account.
• Communications: messages, inquiries, and files you send us through forms, email, phone, chat, or meetings.

2.2 Client financial data

To perform our Services, we may access or receive:

• Access to your accounting software (e.g., QuickBooks Online, Xero), including accountant or read-only user access
• Bank and credit card statements, receipts, invoices, bills, and payroll reports
• Sales and payment platform data (e.g., Shopify, Amazon, Stripe, PayPal, Square)
• Chart of accounts, general ledger, financial statements, and related working papers; and
• Information about your customers, vendors, and employees that appears in your financial records.

We request only the data reasonably necessary for the Services. We do not need and ask you not to send full bank login passwords, full card numbers, or government ID numbers by email. Please use the secure access methods we provide.

2.3 Information collected automatically

When you visit our Website, we may automatically collect your IP address, browser type and version, device and operating system, pages viewed, referring URLs, time spent, and similar usage data, using cookies and similar technologies.

2.4 Information from third parties

With your authorization, we may receive information from your accounting software provider, bank feeds, payment processors, or your CPA or accounting firm.

3. How We Use Your Information

We use information to:

• Provide, operate, and maintain our Services (e.g., bookkeeping, reconciliations, accounts payable/receivable, reporting, cleanup and catch-up work)
• Access and manage your accounts in third-party software, as you authorize
• Fulfill our obligations in white-label or subcontracting arrangements with CPA and accounting firms
• Process billing and send administrative notices
• Communicate with you, respond to inquiries, and provide support
• Send service updates and, where permitted, information about our services (you can opt out at any time)
• Maintain security, prevent fraud and misuse, and troubleshoot
• Improve our Website, user experience, and service offerings
• Comply with legal obligations, enforce our agreements, and resolve disputes

We do not use client financial data for marketing, and we do not use it for any purpose other than delivering the Services to you or as required by law.

4. Legal Bases for Processing (EEA/UK Users)

If the GDPR or UK GDPR applies to you, we process your personal data on the following legal bases:

• Contract: We process your data to provide the Services you have requested from us, such as performing bookkeeping and accounting work for you.
• Legitimate Interests: We process your data for our legitimate business interests, such as securing our systems, preventing fraud, and improving our Services, always balanced against your rights and freedoms.
• Legal Obligation: We process and retain your data where necessary to comply with applicable laws, such as tax, accounting, and regulatory requirements.
• Consent: Where required, such as for certain cookies or marketing emails, we process your data only with your consent. You may withdraw your consent at any time.

5. How We Share Your Information

We do not sell or rent your personal or financial information. We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act. We share information only in these situations:

• Service providers and software vendors: trusted third parties that help us deliver the Services, such as accounting platforms (Intuit QuickBooks, Xero), payment processors (Stripe, PayPal, Square), cloud storage and document-sharing tools, communication and email tools, project management tools, and website hosting and analytics providers. They may access information only as needed to perform services for us and are required to protect it.
• White-label partners: if we provide services through your CPA or accounting firm, client data is treated as strictly confidential and used only to perform the agreed tasks.
• Professional advisors: lawyers, auditors, insurers, or other advisors bound by confidentiality duties.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred, subject to the same protections described in this policy.
• Legal requirements: where required by law, court order, or a valid request from public authorities, or to protect our rights, safety, or property.
• With your consent or at your direction.

6. International Data Transfers and Processing Locations

Accounting Touch operates from Bangladesh and serves clients in the United States and other countries. This means your information may be accessed from, transferred to, and processed in Bangladesh and in other countries where we or our service providers operate, including the United States. These countries may have data protection laws different from those in your country.

Where required, we use appropriate safeguards for such transfers, such as contractual protections, access controls, and encryption, and we handle your data under the standards in this policy regardless of location. Where a client's agreement requires specific data handling or location terms, we will follow them.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including:

• Encrypted connections (HTTPS/TLS) and reliance on the enterprise-grade security of the platforms we use;
• Role-based, least-privilege access, so team members see only the data needed for their work;
• Confidentiality obligations for all employees and contractors with access to client data;
• Strong password practices and multi-factor authentication where available;
• Use of authorized accountant access rather than shared credentials, wherever possible; and
• Periodic review of access and prompt removal of access when it is no longer needed.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Please protect your own login credentials and tell us immediately if you suspect unauthorized access.

8. Data Breach Notification

If we become aware of a security incident that affects your personal or financial information, we will investigate promptly, take steps to contain it, and notify affected clients and, where required, regulators, without undue delay and in line with applicable law and our agreements.

9. Data Retention and Deletion

We retain information only as long as needed to provide the Services, meet our agreements, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our rights. When our engagement ends, we will return or securely delete or destroy client financial documents as requested, and we will remove our access to your accounting software, subject to any legal retention requirements. Website inquiry and marketing data is kept only as long as reasonably necessary for those purposes.

10. Cookies and Tracking Technologies

We may use cookies, web beacons, pixels, and similar technologies for the following purposes:

• Essential cookies: required for the Website to function and stay secure.
• Analytics cookies: help us understand how visitors use the Website.
• Functionality/marketing cookies: remember preferences and measure outreach, where used.

You can set your browser to refuse cookies or to alert you when a cookie is sent, but some parts of the Website may not work properly.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy;
• Correct inaccurate or incomplete data;
• Delete your personal data, subject to legal exceptions;
• Restrict or object to certain processing;
• Data portability, where applicable;
• Withdraw consent at any time, where processing is based on consent; and
• Non-discrimination for exercising your rights.

California residents: under the CCPA/CPRA you have the right to know, access, correct, and delete your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information. Some information we handle in providing financial services may be exempt from certain state privacy laws under federal law.

EEA/UK residents: you also have the right to lodge a complaint with your local data protection authority.

How to exercise your rights: email us at info@accountingtouch.com with your request. We may need to verify your identity first. We aim to respond within 30 days (or the period required by applicable law). If you are an end customer of one of our clients, please contact that client directly, as we process your data on their behalf and instructions.

12. Roles of the Parties (Client Data)

For client financial records we handle while providing the Services, the client (or the CPA/accounting firm we support) generally decides what data to provide and why, and we process it on their behalf. Clients are responsible for having the right to share this data with us and for giving us accurate information. A client's own use of its customers' and employees' data remains their responsibility.

13. Third-Party Websites and Services

Our Website and communications may contain links to third-party sites (including accounting software, payment platforms, or social media). We do not control and are not responsible for their privacy practices. Please review their policies.

14. Email and Marketing Communications

If you contact us or subscribe to updates, we may email you about our services. You can unsubscribe at any time using the link in our emails or by contacting us. We will still send essential service and account messages.

15. Children's Privacy

Our Website and Services are intended for businesses and adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated version on this page with a new "Last Updated" date and, for material changes, may notify you by email or a notice on the Website. Please review this page periodically.

17. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or our data practices, please contact us: