Privacy Policy

Last Updated: December 29, 2025

Introduction

Welcome to Books4u ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our accounting and financial management platform.

By using Books4u, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

Full name, email address, phone number
Company name, business address, tax identification numbers
Username and password (encrypted)
Payment information (processed securely through third-party processors)

Business Data:

Financial records (transactions, invoices, bills)
Customer and vendor information
Employee data (names, addresses, compensation details)
Inventory records
Bank account information for reconciliation
Tax documents and records

Communication Data:

Support requests and correspondence
Feedback and survey responses
Training session participation

1.2 Information We Collect Automatically

Usage Information:

IP address, browser type, operating system
Pages visited, features used, time spent
Device information and unique identifiers
Login times and access patterns

Cookies and Tracking Technologies:

Session cookies (required for functionality)
Preference cookies (optional, for user settings)
Analytics cookies (optional, to improve our service)
Performance monitoring data

1.3 Information from Third-Party Integrations

When you connect third-party services to Books4u:

Facebook Integration:

Facebook user ID, name, and email
Facebook Page information (page ID, name, follower count)
Page access tokens (encrypted and stored securely)
Ad account information (account ID, name, currency)
Campaign performance metrics (impressions, clicks, spend)
Post data and engagement metrics
Comments and interactions on your posts

Banking Integrations:

Bank transaction data
Account balances and statements
Payment processing information

Other Integrations:

Data from accounting software imports
E-commerce platform sales data
Payment gateway transaction records

2. How We Use Your Information

2.1 Service Delivery

Provide accounting and financial management services
Process transactions, invoices, and payments
Generate financial reports and analytics
Manage inventory and payroll operations
Facilitate Facebook marketing campaigns and page management
Sync data between integrated platforms

2.2 Service Improvement

Analyze usage patterns to improve functionality
Develop new features and services
Conduct research and analytics
Test and optimize system performance

2.3 Communication

Send service-related notifications
Provide customer support
Send account updates and security alerts
Deliver marketing communications (with your consent)
Request feedback and conduct surveys

2.4 Security and Compliance

Detect and prevent fraud
Monitor for unauthorized access
Ensure compliance with legal obligations
Maintain audit trails for financial records
Verify user identity

2.5 Legal Obligations

Comply with tax and regulatory requirements
Respond to legal requests and prevent harm
Enforce our Terms of Service
Protect our rights and property

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

When you explicitly authorize sharing
When connecting third-party integrations
When sharing reports with designated users

3.2 Service Providers

We share information with trusted third-party vendors who assist us:

Cloud hosting providers (data storage)
Payment processors (secure payment handling)
Email service providers (communications)
Analytics providers (service improvement)
Security services (fraud prevention)

All service providers are contractually bound to protect your data and use it only for specified purposes.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to the same privacy protections.

3.4 Legal Requirements

We may disclose information when required by law:

To comply with legal processes (subpoenas, court orders)
To respond to government requests
To protect our rights and safety
To prevent fraud or illegal activities
To enforce our Terms of Service

3.5 Aggregated Data

We may share anonymized, aggregated data that cannot identify individual users for research, marketing, or business purposes.

4. Facebook Data Usage

4.1 What Facebook Data We Access

When you connect your Facebook account:

Profile Information: Name, email, profile picture
Page Information: Pages you manage, page statistics
Ad Account Data: Campaign metrics, budget information
Post Data: Your published posts, scheduled content
Engagement Metrics: Likes, comments, shares, reach
Page Access Tokens: To post on your behalf

4.2 How We Use Facebook Data

Display your Facebook pages within Books4u dashboard
Import ad campaign performance for reporting
Schedule and publish posts to your selected pages
Show engagement analytics and insights
Manage comments and interactions
Track marketing ROI

4.3 Facebook Data Retention

Active integration data: Retained while integration is connected
Historical metrics: Retained for reporting purposes (up to 2 years)
Cached data: Automatically refreshed every 24 hours
Upon disconnection: Facebook access tokens are immediately deleted

4.4 Facebook Data Deletion

You can delete your Facebook data by:

Disconnecting Facebook integration in Books4u settings
Revoking Books4u access in Facebook settings
Contacting us at privacy@books4u.pro

4.5 Facebook Platform Compliance

We comply with Facebook Platform Terms and Developer Policies. Facebook data is used only for the purposes you authorize and is not shared with third parties without your consent.

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

Encryption: Bank-level SSL/TLS encryption for data in transit
Data Encryption: AES-256 encryption for sensitive data at rest
Access Controls: Role-based permissions and authentication
Token Encryption: Secure storage of OAuth tokens using Fernet encryption
Secure APIs: Protected endpoints with authentication requirements

5.2 Operational Safeguards

Regular security audits and vulnerability assessments
Employee training on data protection
Limited access to personal information (need-to-know basis)
Secure backup and disaster recovery procedures
Incident response and breach notification protocols

5.3 Infrastructure Security

Cloud hosting with enterprise-grade security (AWS/Azure/Google Cloud)
Network firewalls and intrusion detection
Regular software updates and security patches
24/7 system monitoring

Note: While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your information.

6. Data Retention

6.1 Active Accounts

We retain your information for as long as your account is active and as needed to provide services.

6.2 Inactive Accounts

After 12 months of inactivity, we may archive your account
After 24 months, we may delete non-essential data
Financial records retained per legal requirements (typically 7 years)

6.3 Legal Requirements

Some data must be retained for legal and regulatory compliance:

Tax records: 7 years
Payroll records: 4 years
Audit trails: 7 years
Transaction records: 7 years

6.4 Account Deletion

Upon account closure, we will:

Delete personal information within 30 days
Retain financial records as required by law
Remove your data from active databases
Keep minimal information for legal purposes (fraud prevention)

7. Your Privacy Rights

7.1 Access and Portability

Request a copy of your personal information
Download your financial data in common formats (CSV, Excel, PDF)
Export reports and transaction history

7.2 Correction and Update

Update your account information anytime
Correct inaccurate personal data
Modify business information and settings

7.3 Deletion

Request deletion of your personal information
Close your account permanently
Note: Some data may be retained for legal compliance

7.4 Opt-Out Rights

Unsubscribe from marketing emails (link in every email)
Disable non-essential cookies
Opt out of analytics tracking
Refuse optional data collection

7.5 Data Portability

Request data in machine-readable format
Transfer data to another service provider

7.6 Withdrawal of Consent

Disconnect third-party integrations anytime
Revoke permissions for data sharing
Change privacy preferences

7.7 Regional Rights

For EU/EEA Residents (GDPR):

Right to be forgotten
Right to restrict processing
Right to object to processing
Right to lodge a complaint with supervisory authority

For California Residents (CCPA):

Right to know what information is collected
Right to delete personal information
Right to opt-out of sale (we don't sell data)
Right to non-discrimination for exercising rights

For South African Residents (POPIA):

Right to access personal information
Right to correction of information
Right to deletion
Right to object to processing

To exercise your rights, contact us at privacy@books4u.pro

8. Children's Privacy

Books4u is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover that a child has provided personal information, we will delete it immediately. If you believe a child has provided information to us, please contact privacy@books4u.pro.

9. International Data Transfers

Books4u is based in Lesotho. If you access our service from outside Lesotho, your information may be transferred to, stored, and processed in Lesotho or other countries where our service providers operate.

We ensure appropriate safeguards are in place:

Standard contractual clauses
Adequacy decisions where applicable
Encryption during transfer
Compliance with applicable data protection laws

10. Third-Party Links and Services

Our service may contain links to third-party websites and services:

We are not responsible for their privacy practices
We encourage you to review their privacy policies
Third-party integrations operate under their own terms

Integrated Services:

Facebook: Facebook Privacy Policy
Payment processors: Subject to their own privacy policies
Banking services: Subject to financial institution policies

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be:

Posted on this page with updated "Last Updated" date
Notified via email for material changes
Effective immediately upon posting (unless otherwise stated)

Continued use of Books4u after changes constitutes acceptance of the updated policy.

12. Cookie Policy

12.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our service.

12.2 Types of Cookies We Use

Essential Cookies (Required):

Session management
Authentication
Security features
Cannot be disabled

Functional Cookies (Optional):

User preferences
Language settings
Display customization

Analytics Cookies (Optional):

Usage statistics
Performance monitoring
Feature optimization

Marketing Cookies (Optional):

Ad campaign tracking
Conversion measurement
Remarketing (with consent)

12.3 Managing Cookies

You can control cookies through:

Browser settings (block or delete cookies)
Books4u cookie preferences in account settings
Opt-out tools for third-party cookies

Note: Disabling essential cookies may affect functionality.

13. Contact Information

13.1 Privacy Questions

For privacy-related questions or concerns:

Email: privacy@books4u.pro
Phone: +266 2xxx xxxx
Address: Books4u Privacy Team, Maseru, Lesotho

13.2 Data Protection Officer

If you have concerns about how we handle your data:

Email: dpo@books4u.pro

13.3 Exercise Your Rights

To access, correct, or delete your information:

Email: privacy@books4u.pro with subject "Data Rights Request"
Online: Account Settings > Privacy > Data Rights
Response Time: Within 30 days

13.4 Security Concerns

To report security issues:

Email: security@books4u.pro
Response Time: Within 24 hours for critical issues

14. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with:

Lesotho: Data Protection Commissioner
EU/EEA: Your local data protection authority
California: California Attorney General's Office
South Africa: Information Regulator

15. Definitions

Personal Information: Information that identifies or can identify an individual.

Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion).

Controller: Books4u, the entity determining how personal information is processed.

Processor: Third-party vendors processing data on our behalf.

Consent: Freely given, specific, informed agreement to data processing.

16. Legal Basis for Processing (GDPR)

We process personal information based on:

Contract Performance: To provide services you requested
Legal Obligation: To comply with laws and regulations
Legitimate Interest: To improve services and prevent fraud
Consent: For marketing and optional features (can be withdrawn)

Summary

What we collect: Account info, business data, usage data, Facebook integration data

Why we collect it: To provide accounting services, improve our platform, ensure security

How we use it: Service delivery, reporting, Facebook marketing features, communication

Who we share with: Service providers (with safeguards), as required by law, never sold

Your rights: Access, correct, delete, export your data; opt-out of marketing; disconnect integrations

How we protect it: Bank-level encryption, secure infrastructure, access controls, regular audits

How long we keep it: Active accounts indefinitely; financial records per legal requirements (7 years)

Your control: Manage settings, disconnect integrations, delete account, exercise privacy rights

Questions? Contact us at privacy@books4u.pro

Your privacy matters to us. We are committed to protecting your information and being transparent about our practices.