Open Accounting Software free. No card until you pick a plan

To Legal Center

Data Processing Addendum

Counsel has not reviewed this draft. It is not the contract.

Effective: February 06, 2026

This page supplements the Terms for a subscriber who puts other people's information into the software. It is a United States description. It is not a GDPR Standard Contractual Clauses pack. We do not offer the service outside the United States.

Roles

The subscriber decides what client and vendor data to enter. Scott Applications LLC stores and displays it so the software runs. We do not sell it. We do not become the accountant for the subscriber's customer.

Companies we call

  • Stripe, for the software subscription and for a connected account the subscriber turns on.
  • PayPal, for the same two flows when the subscriber connects PayPal.
  • The VPS that hosts the site, and MongoDB on that machine.
  • SMTP2GO, to send mail.
  • Cloudinary, for files the subscriber uploads.
  • Anthropic or xAI, when a model call is on. A submitted document may be sent to either configured provider.

We do not list a vendor we do not call. A change to this list is a draft until counsel accepts it.

Security

Pages are served over HTTPS. Some fields are encrypted with the field-level map on the collections that map covers. Each company's books are in their own database. Passwords and invite tokens are hashed. We have not completed an independent security-audit report. We do not promise a 72-hour notice clock.

Requests

A person asks to know, correct, or delete by emailing jfeliciano@scottapplications.com or by opening a ticket at /support. We do not run a separate state-by-state portal.

Incidents

Notice after a breach of personal data follows the state law that applies, including Texas. Mail goes to jfeliciano@scottapplications.com, which a person reads. See the incident response policy.

Suggested Documents in Legal

Visit Legal Center