Privacy.
Effective October 5, 2026
Even is an accounting and bookkeeping app operated by Sasquatch and Co (“we”). This page explains what information Even handles, why, and who else touches it. Even is invite-only today, and we do not sell your information or use it for advertising.
What we collect
- Account details. Your email address, name, and sign-in credentials, plus an authenticator factor if you turn on two-step sign-in.
- Bank data you connect. When you link an account through Plaid, we receive account names, the last four digits of account numbers, balances, and transactions. We never see or store your bank username or password.
- Your books.Everything you enter or import: chart of accounts, journal entries, categories, rules, budgets, projects, invoices, contacts (including your customers’ and vendors’ names, emails, and addresses), and receipts you upload.
- Access requests. If you ask for a seat or for updates, the email, name, and note you provide.
- Technical data. Your IP address is used briefly to limit repeated form submissions, and our hosting provider keeps standard server logs.
How we use it
- To run the app: sync your bank feeds, keep your books, produce reports, and send invoices and reminders you ask Even to send.
- To power the AI features you use, described below.
- To keep accounts secure: sign-in, two-step verification, abuse limits, and an audit log of changes.
- To reply to access requests and send the updates you asked for.
AI features
Ledger AI, transaction categorization, receipt reading, and the nightly review send the relevant parts of your books (for example transaction descriptions, amounts, account names, or a receipt image) to an AI model provider to produce an answer. By default that provider is Anthropic. If you choose an OpenAI or Google model in Ledger AI, your conversation goes to that provider instead.
Who we share it with
We share information only with the service providers that run Even, and only what each one needs:
- Supabase hosts our database and handles sign-in.
- Vercel hosts the app.
- Plaid connects your bank accounts. Plaid’s own privacy policy covers the data it collects from your bank.
- Stripe processes online payments when your customer pays an invoice. Card details go directly to Stripe and never touch Even.
- Resend delivers the emails Even sends, such as invoices, reminders, and notifications.
- Anthropic, and OpenAI or Google if you pick their models, for the AI features above.
- Cloudflare Turnstile, when enabled, checks that sign-in and access forms are submitted by a person.
We may also disclose information if the law requires it.
Cookies and tracking
Even uses cookies only to keep you signed in, and your browser’s local storage to remember display preferences such as table columns. There are no advertising or analytics trackers.
How we protect it
Data travels over HTTPS. Bank access tokens are encrypted before they are stored, database rules limit each account to its own records, and every change to your books is recorded in an audit log.
Keeping and deleting your data
We keep your data while your account is active. You can disconnect a bank at any time from Settings, which revokes Even’s access at Plaid, and you can export your reports as CSV or PDF. To have your account and data deleted, email us at pwaismann@gmail.com and we will do it, except for anything the law requires us to keep.
Changes
If this policy changes, we will update the date above, and tell account holders directly about any significant change.
Contact
Questions about privacy: pwaismann@gmail.com.