Privacy Policy

Honumx, LLC · Effective June 11, 2026 · Last updated September 26, 2026

1. Introduction

Honumx, LLC ("Honumx," "we," "us," or "our") operates the Bilanzart™ platform — a cloud accounting, reporting, and tax application available at bilanzart.io ("the Platform"). This Privacy Policy explains how we collect, use, disclose, and protect information about:

  • Firm users — accounting professionals and firm staff who use Bilanzart™ to manage client accounts
  • Client users — businesses and individuals whose financial data is managed through the Platform by their accounting firm

By using the Platform, you agree to the practices described in this policy. If you do not agree, do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

CategoryExamples
Account identifiersName, email address, job title
Business informationCompany name, Employer Identification Number (EIN), business address
Personal identifiersSocial Security Number (SSN) — collected only for payroll and tax preparation workflows
Financial recordsTransactions, invoices, bills, payroll data, bank account and routing numbers
Tax documentsW-2s, 1099s, tax filings, IRS notices
Uploaded filesReceipts, invoices, supporting documents uploaded to the Platform

2.2 Information Collected Automatically

CategoryExamples
Usage dataPages visited, features used, timestamps of actions
Authentication dataLogin timestamps, IP addresses, session identifiers
Security eventsFailed login attempts, unauthorized access attempts
Audit logRecord of every create, update, and delete action on your data

2.3 Information from Third-Party Services

Plaid: If you connect a bank account through the Platform, we use Plaid Technologies, Inc. ("Plaid") to facilitate that connection. When you connect a bank account, Plaid collects and provides us with:

  • Bank account and routing numbers
  • Transaction history (payee names, amounts, dates, categories)
  • Account balances

Your use of Plaid's services is also governed by Plaid's Privacy Policy. We store Plaid access tokens in encrypted form and never store your bank login credentials.

3. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Platform (accounting, reporting, payroll, tax preparation, bank reconciliation)
  • Process and display financial transactions imported from connected bank accounts
  • Generate financial statements, reports, and tax preparation exports
  • Authenticate users and maintain account security
  • Send transactional emails (invoices, payroll notifications, access review reminders)
  • Detect and prevent fraud, unauthorized access, and security incidents
  • Comply with legal obligations, including tax reporting requirements
  • Respond to support requests and privacy inquiries

We do not sell your personal information or use it for targeted advertising.

Legal basis (TDPSA / GLBA): we process your data to perform our contract (providing the Platform that accounting firms and professionals use to serve their own clients), to comply with legal obligations (including GLBA financial privacy requirements), and with your consent where required. Bilanzart™ is a software platform, not an accounting firm: we do not ourselves provide accounting, bookkeeping, or tax services, and we do not guarantee the accuracy or effectiveness of the services performed by the independent firms and professionals who use the Platform.

4. How We Share Your Information

We share information only as described below:

RecipientPurposeData shared
ClerkUser authentication and identity managementName, email, role
StripeSubscription billing and payment processing; online invoice payments through a firm's connected Stripe account (Stripe Connect)Firm name, email, billing address; for invoice payments, invoice number, customer name and email, and amount due
PlaidBank account connection and transaction syncUser ID, connected account data
AnthropicAI-assisted document extraction, transaction categorization, and report narrativesTransaction descriptions (scrubbed of account/SSN/EIN patterns), document images, aggregated financial figures
ResendTransactional email delivery and receipt of documents emailed to the Platform (email ingest)Recipient and sender email addresses, email content and attachments
CloudflareNetwork edge, DNS, and secure tunnel to our serversAll traffic between your browser and the Platform passes through Cloudflare
BackblazeOffsite backup storageEncrypted backups of the database and of uploaded files (encrypted before upload; Backblaze cannot read them)
CalendlyIf a firm connects its own Calendly account, syncing that firm's bookings into the PlatformThe firm's Calendly access token is used to read its bookings (event details and attendee email)
Honumx SchedulingIf a firm enables the scheduling add-on, appointment bookingAttendee name, email, and booking details — a separate Honumx product (not part of Bilanzart™), governed by its own privacy policy, independent of this document
Your accounting firmClient users: your firm accesses your financial data to provide accounting servicesAll data in your client account

We do not share your information with any other third parties except as required by law or to protect the rights and safety of Honumx, our users, or the public.

Law enforcement and legal process: We may disclose information if required by a valid court order, subpoena, or applicable law. Where permitted, we will notify affected users before disclosure.

5. Data Retention

Data typeRetention period
Active account dataRetained for the duration of the firm's subscription
Deleted records (soft-deleted)Purged 90 days after deletion
Audit logRetained for 7 years (required for financial recordkeeping compliance)
Uploaded filesRetained for the duration of the subscription; deleted with the rest of the account data 90 days after termination
BackupsDatabase backups are kept for 30 days on our server; encrypted offsite backups of the database and uploaded files are kept for about 12 months (30 daily, 12 weekly, 12 monthly)
Security event logRetained for 2 years

Upon termination of a firm's subscription, account data is retained for 90 days to allow data export, then purged. Firm administrators are emailed when this period starts, again at day 60, and 7 days before the purge, and can download their data from the Platform until then. The audit log is exempt from this purge and retained for the full 7-year period. Data under a legal preservation obligation is kept until that obligation ends.

Backups are not altered when data is deleted: data purged from the Platform (including on a deletion request) remains in encrypted backups until they age out, up to about 12 months later.

6. Data Security

We protect your information using the following controls:

  • Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.2 or higher
  • Encryption at rest: Sensitive fields (SSNs, EINs, bank account numbers, routing numbers, Plaid access tokens) are encrypted using AES-128-CBC with HMAC-SHA256 (Fernet) before storage
  • Access controls: Role-based access control limits who can view or modify your data; database-level row isolation ensures firm and client data cannot cross between accounts
  • Multi-factor authentication: Available for all users; required for administrative accounts
  • Audit logging: All create, update, and delete operations are logged with user identity and timestamp

No security system is impenetrable. In the event of a breach affecting your data, we will notify you within 72 hours of discovery as required by applicable law.

7. Your Rights

Texas Residents (Texas Data Privacy and Security Act — TDPSA)

If you are a Texas resident, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data (subject to our legal retention obligations)
  • Obtain a copy of your personal data in a portable format
  • Opt out of the sale of your personal data (we do not sell personal data)
  • Not be discriminated against for exercising any of these rights

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days. If we are unable to fulfill your request, we will explain why. You may appeal a denied request by replying to our response email; we will respond to appeals within 60 days.

All Users

Regardless of your location, you may:

  • Update your account information by contacting your firm administrator or emailing [email protected]
  • Request deletion of your account by contacting [email protected] (subject to retention obligations above)
  • Disconnect a bank account at any time from the Platform; this removes the Plaid access token and stops future transaction syncing

Cookies

We use only the session cookies required for authentication (Clerk). No third-party advertising or tracking cookies are used.

8. Financial Privacy — GLBA Notice

Bilanzart™ handles "nonpublic personal financial information" as defined by the Gramm-Leach-Bliley Act (GLBA). We collect and use this information solely to provide the accounting and financial management services you have requested. We do not share nonpublic personal financial information with non-affiliated third parties for marketing purposes.

9. Data Processed on Behalf of Accounting Firms

Client users: your accounting firm is the primary controller of your financial data within the Platform. Honumx processes that data as a service provider on the firm's behalf. For questions about how your firm uses your data, contact your firm directly. For questions about Honumx's handling of your data as a service provider, contact [email protected].

10. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to firm administrators by email at least 30 days before taking effect; administrators who join during the notice period are notified too. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy questions, requests, or complaints: [email protected]

We will acknowledge your inquiry within 2 business days and resolve it within 45 days.

This policy applies to the Bilanzart™ platform operated by Honumx, LLC. It does not apply to third-party websites or services linked from the Platform.