Legal

Privacy Policy

Last updated: March 4, 2026

1. Introduction

Boekhoud Buddies is a product of Kaya Core, Inc., a Delaware C Corporation (EIN: 30-1478833), with its operational office at Leyweg 336, 2545ED The Hague, The Netherlands.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bookkeeping platform at boekhoudbuddies.com ("Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name and email address
  • Business information (company name, KVK number, BTW number)
  • Address and contact details
  • Bank account number (IBAN) for invoice generation

2.2 Financial Data

To provide our bookkeeping services, we process:

  • Invoice data (client details, amounts, dates)
  • Expense records and receipts
  • VAT (BTW) filing information
  • Bank transaction data (when you connect your bank via Ponto/Isabel)

2.3 Technical Data

  • IP address and browser type
  • Usage patterns and feature interactions
  • Device information

3. How We Use Your Information

We use your data to:

  • Provide and maintain the Service (invoicing, VAT, expense tracking)
  • Process subscriptions and payments via Stripe
  • Generate PDF invoices and financial reports
  • Send transactional emails (invoice delivery, account notifications)
  • Improve and develop new features
  • Comply with legal obligations (e.g., Dutch tax regulations)

4. Third-Party Services

We use the following third-party services that may process your data:

Cloudflare
Hosting, CDN, and security services. Data is processed in accordance with Cloudflare's privacy policy.
Stripe
Payment processing for subscriptions. Stripe handles all payment card data — we never store your card details.
Ponto by Isabel Group
PSD2-compliant bank connection for transaction imports. Access is read-only and revocable at any time.
Resend
Transactional email delivery (invoice sending, account notifications).

5. Data Storage & Security

Your data is stored on Cloudflare's global infrastructure, including Cloudflare D1 (database) and Cloudflare KV (key-value storage for assets). All data is encrypted in transit (TLS) and at rest.

We implement industry-standard security measures including secure authentication, encrypted API communications, and regular security reviews.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Correct inaccurate data
  • Erasure — Request deletion of your data ("right to be forgotten")
  • Data Portability — Receive your data in a machine-readable format
  • Restriction — Limit how we process your data
  • Objection — Object to data processing based on legitimate interests

To exercise any of these rights, contact us at [email protected].

7. Cookies

We use essential cookies only — for authentication sessions and security. We do not use advertising or tracking cookies. No third-party analytics trackers are loaded.

8. Data Retention

We retain your account data for as long as your account is active. Financial records are retained for the legally required period (7 years under Dutch tax law). When you delete your account, we will remove your personal data within 30 days, except where required by law.

9. Children's Privacy

Our Service is intended for business use by adults. We do not knowingly collect data from anyone under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service. Continued use after changes constitutes acceptance.

Contact Us

If you have any questions about this Privacy Policy:

  • ✉ [email protected]
  • ☎ +31 70 701 33 27
  • 📍 Kaya Core, Inc. — Leyweg 336, 2545ED The Hague, The Netherlands