Plain answers about how GoCounting AI handles your bank connection and books. We list only what we have verified in our own system — no certifications are claimed.
You connect your bank through Plaid Link. You sign in on Plaid / your bank’s screen — GoCounting never sees or stores your bank password.
Before connecting, you see and accept what data is requested, why, and who can see it. Your consent is recorded with its version and date and you can revoke it.
Plaid is a third-party service that connects apps to banks. Its own privacy policy applies to the connection screen.
We request only Plaid Transactions (accounts, balances and transactions for bookkeeping). We do not request payment, transfer, identity or account-number products.
You can also upload statements or receipts instead of connecting a bank.
Every request is checked on our servers: you only see your own company, or a company that explicitly gave you access.
Roles decide what each person can do (owner, accountant, bookkeeper, read-only, receipts-only employee…).
GoCounting support staff have no default access to your balances or transactions in the app. Exceptional access needs a written reason, approval by a security administrator, expires automatically, is read-only and is logged.
An accountant only sees a company after that company invites them or chooses to be managed by their firm. You can remove the accountant at any time.
Inside an accounting firm, staff only open the client companies they were assigned to.
Connecting your bank lets GoCounting AI read data for bookkeeping. It does not give GoCounting AI permission to move money from your bank account.
Paying your GoCounting AI subscription (Stripe) or sending an invoice pay link is a separate action you start yourself.
The bank access token Plaid gives us is encrypted with AES-256-GCM before it is saved, and is only used on our servers.
Bank access tokens are never sent to your browser or app.
The site is served only over HTTPS (HSTS on).
Database storage encryption is provided by our hosting provider; we do not claim it as our own control.
Two-step verification (passkey or authenticator app) is required to open your books and bank data.
Connecting or removing a bank asks for a recent second factor.
Your books stay while your account is active so your history is complete. The company owner can delete a bank account’s data or wipe the books. You can ask us to delete your data by email.
Our written retention schedule is in legal review.
You can disconnect a bank any time: we revoke the connection at Plaid and erase the stored access token. Your past books stay until you delete them.
Revoking your bank consent (version 2026-11-02.1) also disconnects every bank of that company.
We use providers for hosting and database (Vercel, Supabase), bank connections (Plaid), payments (Stripe), AI categorization and voice transcription (Anthropic, OpenAI), messaging (HighLevel, Resend, Twilio). Our subprocessor list is in legal review.
Consent to sync your bank is only used for your accounting. Any other use of financial data stays switched off unless a separate review and authorization exist.
Changes to your books and every exceptional staff access are written to append-only audit logs.
If we confirm an incident that affects your data, we will notify you and the authorities as the law requires. Report a security concern to info@seeknovaai.com.
You can export your books, disconnect banks, revoke consent and remove people from your company at any time. Write to us to request access, correction or deletion of your data. Rights vary by state.
We do not sell your data and do not use your bank data for advertising, lending or profiling.
Sign in to send it from your account, or email info@seeknovaai.com.