Our privacy policy, and how we use cookies
Last updated: April 2026
Also see: Terms and conditions of this website
How and why we collect data
We collect data to provide you with the Bottomline service, to improve the product, and to communicate with you about your account. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
The data we collect
Information you give us directly
- Account information: your name, email address, and business name when you sign up or join the waitlist.
- Payment information: processed securely by our payment provider (Stripe). We do not store your full credit card number.
- Messages: anything you send us through the contact form or email.
Information we collect from your connected tools
When you connect a tool (like QuickBooks, HubSpot, or Stripe), we access your data through read-only APIs to generate your monthly report. This may include financial transactions, customer records, deal data, ad campaign data, and email engagement data, depending on which tools you connect.
We do not store the raw data from your connected systems. Data is pulled fresh each time a report is generated, processed in memory, and only the analysis results are stored. You can disconnect any tool at any time.
Information collected automatically
- Usage data: pages visited, features used, and basic interaction data to help us improve the product.
- Device information: browser type, operating system, and screen size for debugging and compatibility.
Third-party services we use
Bottomline uses the following third-party services that may process your data:
- Supabase for authentication and database hosting. Privacy policy
- Stripe for payment processing. Privacy policy
- Nango for secure API connections to your tools. Privacy policy
- Vercel for hosting and deployment. Privacy policy
- Inngest for background job processing. Privacy policy
Cookies
Cookies are small pieces of data stored on your device by your web browser. We use them for the following purposes:
- Essential cookies: required to keep you logged in and maintain your session. These cannot be disabled while using Bottomline.
- Preference cookies: remember your settings and preferences (like which report tab you last viewed).
We do not use advertising cookies, tracking pixels, or any third-party cookies for marketing purposes. We do not participate in ad networks or retargeting programs.
Data retention
We retain your analysis results and account data for as long as your account is active. If you cancel your account, we delete your data within 30 days of cancellation. Raw data from your connected tools is never stored persistently and exists only in memory during report generation.
Your rights
You have the right to:
- Access your personal data at any time through your account settings.
- Correct any inaccurate information in your account.
- Delete your account and all associated data.
- Disconnect any connected tool at any time, immediately revoking our access to that system.
- Export your reports for your own records.
- Object to processing of your data for any purpose beyond providing the service.
For any data requests, contact us through our contact page.
Data security
All data is encrypted in transit using TLS 1.2+. API connections to your tools use OAuth 2.0 with read-only scopes, meaning we can view your data but never modify it. We follow industry-standard security practices and regularly review our security posture.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email at least 14 days before they take effect. Continued use of Bottomline after changes constitutes acceptance. We recommend you review this policy periodically.
Contact
If you have questions about this privacy policy or how we handle your data, please contact us through our contact page.