Privacy policy

• We store your email, password hash, and the OAuth tokens needed to reach your accounting provider. Provider tokens are encrypted at rest (AES-256-GCM).
• Accounting data is fetched from your provider on demand when you (via your AI assistant) request it, and passed through to your assistant. We do not store, resell, or use your accounting data for any other purpose, including training.
• A minimal audit log of tool activity (tool name, timestamp, success) is kept for security and support.
• Payments are processed by Stripe; we never see your card details.
• Disconnecting a company or deleting your account removes the stored tokens. Data controller: Stray Cat AB — contact simon@straycat.se for access or deletion requests (GDPR).

Svenska: Vi lagrar endast det som krävs för att koppla din bokföring till din AI-assistent. Tokens krypteras, bokföringsdata vidarebefordras bara på din begäran och säljs aldrig vidare. Kontakta simon@straycat.se för registerutdrag eller radering.