Privacy Policy
Last updated: September 21, 2026
This policy explains what Webb Consulting LLC, doing business as Yay! Books, collects when you use yaybooks.app, what we do with it, who else sees it, and how long we keep it. It applies to the website and the app.
We know bank statements are about as personal as records get. The short version is: we collect what we need to do the job, we keep it for as short a time as we can, we do not sell it, and we do not use it to train AI models.
1. What we collect
What you give us when you sign up
- Your email address and a password, which we store only as a scrambled hash and never in readable form.
- Your name. The assistant uses it to recognize money you pay yourself.
- The name of each business you add.
What is in the statements you upload
When you upload a PDF statement, we take from it and store:
- The name of the bank or card issuer, and the last four digits of the account number.
- The statement period and the starting and ending balances.
- Every transaction on the statement: its date, its description as the bank wrote it, the merchant we work out from that description, and the amount.
A statement can also contain your full account number, your home address and other details. We do not pull those out or store them separately, but they are inside the PDF file while we still have it. See section 4 for how long that is.
What you tell the assistant
Your answers to its questions, any amount you enter when a purchase is part business and part personal, and any note you type about a transaction.
What we get when you pay
Payments are handled by Stripe. You enter your card details on Stripe's own form. We never see or store your card number. Stripe tells us your customer and subscription identifiers, whether the payment worked, when the plan renews, and the last four digits and expiry of the card, so we can show it to you on the Billing screen.
What we collect automatically
- Your IP address, browser type, and the time and result of requests to our servers. We use this to keep the service running and to spot abuse.
- Error and diagnostic logs when something goes wrong.
- Your settings, such as the background photo you chose.
Our host also collects analytics of its own about visits to the site. Section 3 says who that is and section 8 explains it.
What we never ask for
We do not ask for your online banking username or password, and Yay! Books does not connect to your bank. You give us statements, nothing else.
2. How we use it
We use what we collect to:
- Read your statements and pull the transactions out of them.
- Sort the transactions, ask you questions about the ones we are not sure of, and build your spreadsheet package.
- Create and run your account, and keep you signed in.
- Take payment, renew your plan, and show you your billing history.
- Send you emails about your account: confirming your address, resetting your password, receipts, renewal notices, and warnings before we delete anything.
- Answer you when you contact us for help.
- Keep the service secure, find and fix problems, and stop abuse.
- Meet our legal and tax obligations.
We do not sell your information. We do not rent it, we do not share it for advertising, and we do not use your statements or transactions to train artificial intelligence models.
3. Who else sees it
We use a small number of companies to run Yay! Books. They only get what they need for their part of the job, and they are not allowed to use it for anything else.
| Company | What it does for us | What it can see |
|---|---|---|
| Supabase | Stores our database and files, and handles sign-in | Your account details, your statement files, your transactions and your answers |
| Anthropic | Provides the AI that reads statements and sorts transactions | The text of the statements you upload and the transactions in them. Under their commercial terms, customer content is not used to train their models |
| Stripe | Takes payments and manages subscriptions | Your name, email address, billing address and card details |
| Resend | Sends our emails | Your email address and the contents of the emails we send you |
| Lovable | Serves the website and the app | Requests to the site, including IP addresses. Lovable also collects its own analytics about visits to the pages it serves |
Beyond those companies, we will only pass your information to someone else if:
- You ask us to, or you share it yourself, for example by sending your spreadsheet to your accountant.
- We are legally required to, such as by a valid subpoena or court order. Where we are allowed to tell you, we will.
- We need to in order to protect our rights, our users, or someone's safety.
- Our business is sold or merged, in which case your information moves with it and we will email you before it does.
Your accountant does not get access to Yay! Books. You download your spreadsheet and send it to them yourself.
4. How long we keep things
| What | How long we keep it |
|---|---|
| Your statement PDFs | Normally deleted within an hour of being read, and never kept more than three days. We do not need the file once the transactions are saved |
| Your transactions, answers and notes | Until you delete the business or your account |
| Your account and settings | Until you delete it, or until two years with no sign-in |
| Record that you agreed to these terms | For as long as you have an account, and for five years after, as proof of the agreement |
| Payment and invoice records | For as long as tax and accounting law requires, normally seven years. Stripe keeps its own records under its own policy |
| Server and error logs | 7 days |
| Backups | Deleted data can remain in an encrypted daily backup for up to 7 days before that backup expires |
The two year rule. If nobody signs into an account for two years, we email a warning to the address on the account. If there is still no sign-in after that, we delete the account and everything in it. Signing in at any point starts the two years again.
When you delete. Deleting a business removes its statements, transactions, answers and spreadsheets. Deleting your account removes all of that for every business, plus your account itself, and cancels any active plan. Both are permanent. Download anything you want to keep first.
5. What you can do yourself
Most of what you might want is in the app already:
- Change your email address or password in Settings.
- Change an answer you gave the assistant at any time, and download a fresh spreadsheet.
- Download your spreadsheet package whenever you like, as often as you like.
- Cancel your plan on the Billing screen.
- Delete a business, or delete your whole account, in Settings.
6. Your privacy rights
Some states, including Virginia, give people specific rights over their personal information. Rather than work out which law covers which customer, we offer these rights to everyone who uses Yay! Books, wherever you live:
- Know. Ask us what personal information we hold about you and what we do with it.
- Get a copy. Ask for a copy of your information in a portable form.
- Correct. Ask us to fix information that is wrong.
- Delete. Ask us to delete your information. You can also do this yourself in Settings.
- Opt out of sale, targeted advertising and profiling. We do none of these, so there is nothing to opt out of, but the right stands.
To make a request, email info@yaybooks.app from the address on your account. We will reply within 45 days. If we need longer we will tell you why and take up to 45 more. We do not charge for this, and we will not treat you differently for asking.
If we say no. You can appeal by replying to our answer and saying you want it reviewed. We will look again and write back within 60 days with our decision and the reasons for it. If you are still not satisfied, you can complain to the Virginia Attorney General at oag.state.va.us, or to the attorney general of your own state.
One limit. We may not be able to delete information we are legally required to keep, such as payment records held for tax purposes. If that happens we will tell you what we kept and why.
7. How we protect it
- Everything travels between your browser and our servers over an encrypted connection, and is stored encrypted at rest.
- Passwords are stored as one way hashes. Nobody at Yay! Books can read your password.
- Our database enforces, at the database level and not just in the app, that your account can only reach your own data.
- We delete statement PDFs automatically, so the most sensitive file is not sitting around after we are done with it.
- Access to production systems is limited to people who need it to run the service.
No service can promise perfect security, and we are not going to pretend otherwise. If there is ever a breach that affects your personal information, we will tell you and any regulator we are required to tell, as quickly as the law requires and as quickly as we can.
8. Cookies
We use the small number of cookies and similar storage that the app needs in order to work: keeping you signed in, and remembering settings like the background photo you picked. We do not use advertising cookies and we do not let other companies track you across the web from our site.
One thing you should know: Lovable, the company that hosts Yay! Books for us, collects its own analytics about visits to the pages it serves. That collection belongs to them rather than to us. It is not used for advertising, and it is never joined to your account, your statements or your transactions.
9. Where your information is
Yay! Books is run from the United States and your information is stored and processed there. If you use it from another country, you are sending your information to the United States.
10. Children
Yay! Books is for business owners and is not for anyone under 18. We do not knowingly collect information from children. If we find out we have, we delete it.
11. Changes to this policy
We may update this policy. When we do, we will change the date at the top and post the new version at yaybooks.app. If a change materially affects how we handle your information, we will email you before it takes effect.
12. How to reach us
For any privacy question or request:
Webb Consulting LLC dba Yay! Books 243 Ridge McIntire Road #1042 Charlottesville, Virginia 22903 info@yaybooks.app
Back to home