Privacy
Last updated: September 6, 2026
We keep no copy of your books
Caribooks reads QuickBooks live, whether the request comes from your AI assistant (Claude or ChatGPT) or from a loop running on our side. No copy of your ledger is retained: answers pass through, and the only accounting that stays is what a proposal has to quote to make sense, such as a payee, an amount and a memo.
What we keep
Your account email, QuickBooks access tokens (AES-256 encrypted), the names of your connected companies, and your Stripe billing details.
What loops keep
Per company: the rules you state, your loops (your sentence and its card), a summary of every run with its questions, what it consumed and what it cost, and every proposal with its evidence and the action it would apply. An applied change also keeps the record before and after, so you can undo it. This data stays while the company is connected and is deleted with your account.
The documents you drop off
A receipt dropped in the portal or sent to your Caribooks address is deleted from our storage as soon as it is attached to its expense in QuickBooks. A document nobody matched is deleted after 90 days. Statements and reference documents, a rate sheet for instance, stay until you delete them.
Where your data is hosted
In Canada: Supabase in the AWS Montréal region (ca-central-1) and Vercel in Montréal (yul1). One exception: Vercel Workflow, the engine that moves runs forward, keeps their state in its iad1 region, in Virginia, which includes the run's conversation with the model and so the records it read. Supabase, Vercel and Stripe act as processors for Caribooks.
Your AI assistant and the models
When you query your books from Claude or ChatGPT, your questions and the data that answers them are processed by that provider under its privacy policy. Loops go through OpenRouter, a routing service that forwards each request to the model's provider, Anthropic for Claude, whose terms exclude training on what goes through its API. Request logging is off on our OpenRouter account: what a run reads passes through without being kept there. The model sees the transactions and documents the run examines, your rules, and your sentences. Models from other providers are used only for our own benchmarks on Peich Technologies' books and never see a customer's data. Caribooks does not sell your data and never uses it to train a model.
Cookies
The site sets no tracking cookies by default: our analytics (Fathom) are cookieless. If you accept the banner, a Google advertising cookie is set to measure whether our Google ads lead to signups. Declining removes nothing from the site; to withdraw a given consent, clear the site data in your browser.
Your rights (Quebec Law 25)
You can disconnect a company or delete your account at any time from the portal; the associated tokens are then revoked with Intuit and deleted, and your rules, loops, runs, proposals and dropped-off documents are erased. Questions: support@caribooks.com.
Caribooks · Peich Technologies Inc., Montréal