Privacy Policy

NetOpAccounting · Last updated: May 31, 2026

This Privacy Policy explains how NetOpAccounting ("NetOpAccounting", "we", "us") collects, uses, discloses, secures, retains, and deletes information when you use our cloud accounting platform at netopaccounting.com and related services (the "Service"). By creating an account or using the Service, you agree to this Policy and our Terms of Service.

1. Who we are

NetOpAccounting provides multi-tenant accounting, bookkeeping, payroll, tax-preparation, and bank-data aggregation software for businesses and accounting practices. For privacy questions, contact us at privacy@netopaccounting.com.

2. Information we collect

Category	Examples
Account & profile	Name, email, phone, business name, role, password (stored hashed)
Business financial data	Invoices, bills, expenses, journal entries, chart of accounts, reports
Bank & transaction data	Connected account metadata and transactions obtained via Plaid (see §4)
Payroll & tax identifiers (sensitive)	Employee/contractor names, addresses, bank account & routing numbers, Social Security Numbers (SSN) and Taxpayer Identification Numbers (TIN) where required for payroll and 1099/W-2 preparation
Payment data	Subscription and invoice payments are processed by Stripe; we do not store full card numbers
Technical & usage	IP address, device/browser information, audit logs of actions taken in the Service

3. How we use information

To provide, operate, secure, and improve the Service (bookkeeping, payroll, tax prep, reporting).
To import and categorize bank and app transactions you authorize.
To prepare and (where supported) file tax and information forms you request.
To authenticate users, enforce access controls, and detect or prevent fraud and abuse.
To communicate with you about your account, security, and service updates.

We do not sell your personal information, and we do not use the financial data we process to build advertising profiles.

4. Bank data via Plaid

When you connect a financial account, we use Plaid Inc. ("Plaid") to access account and transaction information on your behalf. By connecting an account, you also agree to Plaid's End User Privacy Policy. Plaid accesses the data using credentials you provide to Plaid; we receive account metadata and transactions and use them solely to deliver the Service to you. We encrypt Plaid access tokens at rest and you may disconnect a financial account at any time, which stops further data collection.

5. How we share information

Within your organization / your accountant: data is shared with users in your company and, where you authorize a connection, with your accounting practice.
Service providers (sub-processors): Plaid (bank data), Stripe (payments), our cloud hosting provider (Amazon Web Services), and email delivery (SendGrid). These providers are bound to use the data only to provide their services to us.
Legal & safety: when required by law, subpoena, or to protect rights, safety, and the integrity of the Service.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data security

All data in transit is encrypted using TLS 1.2 or higher.
Sensitive identifiers (SSN/TIN, bank account/routing numbers) and Plaid access tokens are encrypted at rest using AES-256-GCM.
Passwords are stored using bcrypt hashing; we never store them in plain text.
Access is governed by role-based access controls and least-privilege principles; multi-factor authentication is available and is required before connecting a financial institution.
We maintain audit logs, automated security patching, and tenant data isolation.

See our Information Security Policy for further detail. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable safeguards.

7. Data retention & deletion

We retain personal and financial data for as long as your account is active and as needed to provide the Service and meet legal, tax, and accounting recordkeeping obligations. You may request deletion of your account and associated data, and you may disconnect financial accounts at any time. Upon a verified deletion request, we delete or de-identify your data within 30 days, except where retention is required by law (e.g., tax records). See our Data Retention & Deletion Policy for specifics.

8. Your rights & choices

Access, correct, or export your data.
Disconnect any connected financial account.
Request deletion of your account and personal data.
Depending on your location, you may have additional rights under laws such as the GDPR or CCPA/CPRA. To exercise any right, contact privacy@netopaccounting.com.

9. Consent

By registering for and using the Service, and by connecting financial or payment accounts, you consent to the collection, processing, and storage of your information as described in this Policy. You may withdraw consent by disconnecting accounts and/or requesting account deletion.

10. Children's privacy

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with an updated "Last updated" date and, where appropriate, notified to you.

12. Contact

NetOpAccounting — Attn: Privacy
Email: privacy@netopaccounting.com