Privacy Policy

Information we handle

We handle account and contact information such as email and phone number; business information; access grants; authentication and security records; service usage and security logs; and bookkeeping records such as M-Pesa or bank statements, transactions, receipts, invoices, payroll inputs and uploaded files.

Google sign-in

If you choose Google sign-in, we receive your Google account's immutable identifier, verified email status and email address. We do not receive your Google password. We use the immutable identifier to recognise a linked account.

Why we use information

We process information to create and secure accounts, control business access, deliver bookkeeping, reconciliation, reporting and agreed preparation services, answer support requests, detect abuse, maintain auditability, and improve reliability and customer experience.

Access and service providers

Authorised users can access only businesses covered by their explicit grants. Klin Books personnel may access records where needed to operate and deliver the service. Carefully selected hosting, storage, email, authentication and technology providers process data on our behalf. We do not sell customer financial records.

Storage and security

Structured customer state is stored in access-controlled systems and original evidence in private object storage. We use business scoping, authentication controls, encryption where appropriate, logging and operational safeguards. No system can guarantee that a breach is impossible.

Retention and deletion

We retain information while needed to provide the service, maintain financial and audit records, resolve disputes, secure the platform, and meet legal or professional obligations. Retention varies by record and applicable requirement.

Your choices and rights

Subject to applicable Kenyan law, you may ask about personal data we hold, request correction, object to or restrict some processing, request access or deletion where available, or raise a concern. Accounting records may be subject to retention and integrity requirements.

International processing

Some technology providers may process data outside Kenya. We assess provider access and use appropriate contractual and security safeguards where applicable.

Changes and contact

We may update this policy as the service or legal requirements change. The effective date and version identify the policy presented at account creation. Privacy questions can be sent through the contact link below.