pacioli

who we are

pacioli is made by Jordan Jeffery, trading as entrées studio, in Australia. On this page, "we" and "us" means that. You can reach us at tomspanx@entrees.live. The studio's other policies are listed at entrees.studio/privacy.

your books

pacioli keeps your books in an entrées account. You sign in with a code sent to your email. On the web you can also sign in with GitHub, which tells us your email address and username. One entrées account works across pacioli, åsecond and süschef.

When you are signed in, we store, in Supabase's Sydney data centre:

• your email address and account id, so you can sign in
• your household, and any sole trader, company or trust you set up, with the names you give them
• your chart of accounts
• the entries you stage and approve: dates, amounts, and the descriptions as they appear on your statement
• budgets, monthly closes, plans, holdings and the inputs to your tax estimate
• a history of changes to the books, so every entry can be traced

Access goes through household membership. A signed-in person who is not a member of your household sees nothing of your books. We use your books only to run pacioli for you. We don't use them for advertising, and we never sell them.

what stays on your phone

Some things are kept only in the app on your phone and never reach us: your setup choices, the working copy of your FIRE plan, and paper orders in Investments, which are notes to yourself and are never sent anywhere. Deleting the app deletes them.

Voice. If you ask the tutor a question out loud, your phone's speech recognition (Apple's, on an iPhone) turns it into text under Apple's own privacy terms. We never receive the audio. The tutor's answers are lessons built into pacioli, not an AI service. Reading an answer aloud happens on the phone.

importing statements

in the iPhone app

pacioli reads CSV (for example a CommBank NetBank export), Beancount and JSON files, and it reads them on the phone. The file is not uploaded. You see the entries it found, and only the ones you stage are saved to your books. The iPhone app sends no statement to any AI service.

on the web

• CSV, Beancount and JSON are read in your browser, the same way.
• Spreadsheets (.xlsx) go to our server on Vercel, which turns them into CSV and sends that straight back to your browser. No AI is involved.
• A PDF, or a photo of a statement, goes to our server on Vercel and on to Anthropic, whose model Claude reads the transaction lines and returns them for you to check. pacioli asks before it sends the first one, and sends nothing if you say no. You can turn it off again at any time in Settings. We send the file, not your name or email. Under Anthropic's commercial terms it is not used to train their models, and Anthropic keeps it only for the short time those terms allow, for example to check for misuse.

In every case, our server writes nothing and keeps no copy of the file. Nothing reaches your books until you stage it.

connections on the web

These two are on the web only. Neither is in the iPhone app.

Stripe, if you connect your own Stripe account

You paste a restricted, read-only Stripe key. It is encrypted (AES-256) in our key vault the moment you paste it, and used only to bring your Stripe activity into your books as entries for you to review. The full key is never shown again, to you or anyone else.

Basiq, if you link a bank

Basiq is an Australian open banking service. We create a user for you at Basiq with your email address. You give your bank consent on Basiq's own screens, and Basiq then sends us your bank, account names and numbers, balances and transactions, which are saved into your books. Basiq's own privacy terms apply to what it holds.

who else receives data

Supabase

Stores your account and your books in Sydney, Australia, and runs the server code behind the Stripe connection. Supabase (and the email service it uses) sends your sign-in codes.

Vercel

Hosts pacioli on the web, reads spreadsheets and statements you upload there, and runs our key vault.

Anthropic

On the web only, and only with your permission: the PDF or photo statements you choose to have read.

Stripe, Basiq and GitHub

On the web only, and only if you connect them, as described above.

åsecond, only if you link it

pacioli can send a little of your books' rhythm to your own åsecond, for its Vitals page. This is off by default: it needs a separate feed key from åsecond, pasted into Settings → åsecond, and the sending toggle there turned on. When it is on, pacioli sends a band from 0 to 3 for each posted day of the last twelve weeks, including days with no discretionary spending at all: 0 for none, 1 for at most half the household's usual day, 3 for twice it or more, and 2 between. "Usual" is the household's own median over its last 90 days. A day's band is fixed a day after it is first sent. The bands are sent only while your household has one member; a shared household's books are never banded. pacioli also sends the quarter-hour each time you approve journals, and your device's time zone. It never sends a merchant, an amount, a category, an account or a description.

Unlink in Settings, or sign out of pacioli, and sending stops on that device. Neither deletes what åsecond already has: it stays there until you forget it in åsecond or delete the account. åsecond clears Vitals data older than 90 days each time one of your apps sends it something new, or when you open Vitals while an app is still linked. åsecond's policy applies to it.

Supabase, Vercel, Anthropic and Basiq handle your information for us under their terms with us. Those terms require them to protect it at least as well as this policy does, and to use it only to provide their service to us. Stripe and GitHub hold accounts you have with them, under their own privacy terms, and we only read from them what is described above.

In the iPhone app, your books travel only between your phone and Supabase in Sydney, apart from the åsecond bands and times above if you link it. pacioli loads its typefaces from inside the app. Like any online service, our hosts see your IP address and keep short technical logs to run and protect the service. There are no ads, no analytics and no tracking in pacioli.

data sent overseas

Your account and books are stored in Sydney. On the web, spreadsheets and statements you upload pass through our server on Vercel, and PDF or photo statements you allow to be read go to Anthropic. Both companies are based in the United States, and the file may be processed there. Stripe and GitHub, if you connect them, are in the United States too. Our server code may also run outside Australia. We send each of them only what the feature needs. This is the overseas disclosure Australian Privacy Principle 8 asks us to tell you about.

how long we keep it

• Your books: until you delete them, or delete the account.
• On your phone: until you delete it, or delete the app.
• Statement files: not kept by us. Anthropic keeps them only for the short time its commercial terms allow.
• A Stripe key: until you remove it, or delete the account.
• Spend bands and the books' times, if you link åsecond: in your åsecond until you forget them there or delete the account. åsecond clears any older than 90 days each time one of your apps sends it new Vitals data, or when you open Vitals while an app is still linked. With no app linked, they have no fixed end date.

deleting your data

You can delete journals from your books in Settings. Deleting the app deletes everything it kept on your phone.

To delete your account, email tomspanx@entrees.live from your account address and we delete the account and everything tied to it within 30 days.

That removes the books of every household where you are the only member, any Stripe key you connected, and the user we created for you at Basiq if you linked a bank. If you share a household with someone else, its books stay with them, and the changes you made stay in its history without your account attached. It is one entrées account, so this also deletes your åsecond and your süschef list.

children

pacioli is not made for anyone under 16, and we don't knowingly collect their information. If you think someone under 16 has an account, email us and we will delete it.

security

Everything travels encrypted. Every table in our database is locked to household membership, and we check that another account sees nothing. Keys and secrets stay on our servers and never ship inside the app, and a Stripe key is sealed before it is stored. pacioli cannot move money. No system is perfect: if something goes wrong that puts your information at risk, we will tell you what happened and what we are doing about it.

your rights

You can ask for a copy of what we hold about you, or ask us to correct it. Email us from your account address. If you are unhappy with how we handle your information, tell us first. If we don't fix it, you can complain to the Office of the Australian Information Commissioner atoaic.gov.au.

changes

If this policy changes, we will post the new version here with a new date. If a change matters, we will tell account holders by email before it takes effect.

contact

Jordan Jeffery, trading as entrées studio, Australia. tomspanx@entrees.live