Privacy Policy

1) What this policy covers

This Privacy Policy explains how Koivu Ventures Pte. Ltd. ("Eriko", "we", "us") collects, uses, discloses, and protects information when you use our websites, apps, and services (the "Service"). If you connect third-party services (like QuickBooks, Xero, Stripe, or Square) or upload documents, you are authorizing Eriko to process that information to provide the Service.

2) The information we collect

A) Information you provide:

• Account information: name, email, company name, login credentials (hashed), support messages.
• Billing information: billing contact details and subscription status. Payment details are handled by our payment processor; we do not store full card numbers.
• Content you upload: bank statements, receipts, invoices, and any metadata you provide.

B) Information from connected third parties (with your permission):

• QuickBooks / Xero: chart of accounts, transactions, invoices, customers, vendors, and related metadata.
• Stripe / Square: payments, payouts, fees, and related metadata for receivables tracking.

C) Usage and technical data:

Device and browser information, IP address, pages/actions within the Service, timestamps, and error logs. Cookies or similar technologies for basic site functionality, security, and analytics.

3) How we use your information

We use your information to:

• Provide and operate the Service (sync data, categorize transactions, perform monthly close, generate reports).
• Improve accuracy and user experience.
• Provide human review and support.
• Secure the Service (fraud prevention, abuse detection, access control).
• Bill subscriptions and manage your account.
• Communicate with you (service notices, weekly pulse emails, support responses).

4) AI and model training

Eriko uses third-party AI providers (currently Anthropic) to process and categorize transactions. We do not train public or general-purpose AI models on your private content. We may use information within your account (for example, prior categorizations and corrections) to provide consistent results for you.

5) How we share information

We share information only as needed:

• Service providers: hosting, storage, AI providers, and payment processing.
• Connected third parties you authorize: data flows between those services and Eriko according to your permissions.
• Legal and safety: if required by law, or to protect rights, safety, and integrity of the Service.
• Business transfers: if Koivu Ventures is involved in a merger, acquisition, or asset sale.

We do not sell your personal information.

6) International data transfers

Koivu Ventures is a Singapore company. Our primary hosting is in Germany. Some subprocessors (including AI providers) may process data in other countries (including the United States). Where required (e.g., under GDPR/UK GDPR), we rely on appropriate transfer mechanisms such as contractual protections.

7) Data retention

We retain data for as long as needed to provide the Service and comply with legal obligations. After account closure, we may retain limited records for legal, billing, and security purposes. You can request deletion of your account data by contacting kari@erikobooks.com, subject to legal and operational constraints. Your data stays available for export for 90 days after cancellation.

8) Security

We use reasonable administrative, technical, and organizational measures to protect information, including access controls, encryption in transit and at rest, and audit logging. Bank connections are read-only. No system is 100% secure, and you are responsible for safeguarding your credentials.

9) Cookies and analytics

We use cookies and similar technologies for essential site functionality, security, remembering preferences, and analytics. You can control cookies through your browser settings.

10) Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information, and to object to or restrict certain processing. To exercise rights, contact kari@erikobooks.com. If you are in the EEA/UK, you may have the right to lodge a complaint with your local data protection authority.

11) Children

The Service is not intended for children under 18.

12) Changes to this policy

We may update this Policy. If changes are material, we will provide notice through the Service or by email.

13) Contact

kari@erikobooks.com
Koivu Ventures Pte. Ltd., 11 Collyer Quay, #05-06C The Arcade, Singapore 049317