Privacy Policy
MitoBooks is provided by Brunchys LLC. Effective October 26, 2026.
1. Who We Are and What This Policy Covers
MitoBooks is online accounting software provided by Brunchys LLC, a Michigan limited liability company ("Brunchys LLC," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you visit mitobooks.com, create an account, use the MitoBooks service, or pay an invoice sent through MitoBooks (together, the "Services").
This Policy is part of, and uses the defined terms of, our Terms of Service. If you do not agree with this Policy, please do not use the Services.
There are two kinds of information in the Services, and we treat them differently:
- Account Information: information about you as a MitoBooks user, such as your name, email address, and sign-in details. We decide how this is used, as described in this Policy.
- Customer Data: the business records you and your users put into MitoBooks, such as transactions, invoices, bills, and the names and contact details of your customers, vendors, and employees. We process Customer Data on your behalf and under your instructions, to provide the Services to you. The business that owns the MitoBooks account is responsible for its own customers', vendors', and employees' personal information.
2. Information We Collect
Information you give us:
- Account and profile information: your name, email address, password (stored only as a one-way cryptographic hash), company name, and the date you accepted our Terms.
- Customer Data you enter, import, or upload: accounting records and transactions; customer, vendor, and employee records (which may include names, addresses, phone numbers, email addresses, tax identification numbers, and for payroll, pay rates, withholding details, and Social Security numbers); and documents such as receipts and bills.
- Communications: messages you send us, such as support requests.
Information we receive from services you connect:
- Bank and card data: if you connect a financial account, Plaid Inc. provides us with account details (such as account name, type, and the last digits of the account number), balances, and transactions. We do not receive or store your bank sign-in credentials.
- Payment data: if you accept online payments, Stripe, Inc. provides us with the status and amount of each payment, fees, and limited payer details (such as name and email). Card numbers are entered directly with Stripe and are never stored on our servers.
- QuickBooks data: if you choose to import from QuickBooks Online, Intuit Inc. provides us with the company data you authorize for import. We keep the imported records as part of your books. We do not keep your QuickBooks connection: its access tokens are stored encrypted only while the import and balance check need them, and are revoked with Intuit and deleted once your balances match QuickBooks, when you disconnect, or 7 days after you connect, whichever comes first.
Information collected automatically:
- Log and device data: when you use the Services, our servers record technical information such as your IP address, browser type, the pages and features you use, and the date and time of each request. We use it to operate and secure the Services, for example to stop repeated failed sign-in attempts.
- Cookies and local storage: see Section 7.
3. How We Use Information
We use personal information to:
- provide, operate, and maintain the Services, including processing Customer Data at your direction (for example, sending invoices you create and matching bank transactions you import);
- create and secure your account, verify your email, reset your password, and detect and prevent fraud, abuse, and security incidents;
- send you service messages, such as security alerts, password-reset emails, and notices about changes to the Services or our terms;
- respond to your requests and provide support;
- understand how the Services are used so we can fix problems and improve them, using aggregated or de-identified information where practical;
- comply with law, enforce our Terms, and protect the rights, property, and safety of our users, the public, and us.
We do not sell personal information, we do not share it for cross-context behavioral (targeted) advertising, and we do not use Customer Data to advertise to you or anyone else.
5. If You Receive an Invoice Sent Through MitoBooks
Businesses use MitoBooks to send invoices and accept payments. If you receive an invoice or visit a payment page, the business that sent it controls your information in its records, and its own privacy practices apply. Please contact that business with questions or requests about your information. If you pay online, your card details are handled by Stripe and are not stored by MitoBooks.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal information. These include encryption in transit (HTTPS), encryption at rest of sensitive credentials such as bank-connection and QuickBooks-connection tokens, one-way hashing of passwords, access controls that limit each user to the companies and features their role allows, and limits on repeated sign-in attempts.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and for the users you invite. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law.
8. How Long We Keep Information
We keep Account Information and Customer Data for as long as your account is active. If your account is cancelled or terminated, you may export your data for 365 days, as described in our Terms of Service; after that we may permanently delete it. Deleted data may remain in backups for a limited period until those backups are overwritten.
We may keep some information longer where needed to comply with legal, tax, or accounting obligations, resolve disputes, prevent fraud and abuse, or enforce our agreements. Server logs are kept for a limited period for security and troubleshooting.
9. Your Choices and Rights
You can view and update most Account Information in the Services, export your company data at any time, and change your password. You can ask us to delete your account by contacting us. Company owners can remove users and delete records within their company.
Depending on where you live, you may have rights under state privacy laws, such as the right to know what personal information we hold about you, to get a copy of it, to correct it, and to have it deleted, and the right not to be discriminated against for using these rights. We do not sell personal information or use it for targeted advertising.
To make a request, email us at contact@mitobooks.com. We will need to verify your identity, usually by confirming control of the email address on your account. You may use an authorized agent where the law allows, and we may ask for proof of the agent's authority. If we deny your request, you may appeal by replying to our decision, and we will respond within the time the law requires.
If your request concerns Customer Data that a MitoBooks customer holds about you (for example, as its customer or employee), we will refer you to that business, which controls that information, and we will help it respond as required.
10. Children
The Services are intended for businesses and are not directed to children. You must be at least 18 to create an account. We do not knowingly collect personal information from children under 16 for our own purposes. If you believe a child has given us personal information, please contact us and we will delete it.
11. Where Information Is Processed
Brunchys LLC is based in the United States, and the Services are hosted in the United States. If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.
12. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Services before they take effect. The "Effective" date at the top shows when this Policy was last updated.
13. Contact Us
If you have questions about this Policy or our privacy practices, contact Brunchys LLC at contact@mitobooks.com.