Privacy Policy

Metreks is accounting software for online businesses, operated by Anderson Group Enterprises Ltd. (Toronto, Canada). This policy explains what we collect, why, who we share it with, and the choices you have. Questions: privacy@metreks.com.

What we collect

• Your account: name, email address, a hashed password, and your 2-step verification settings.
• Bank and card data you connect: when you connect an account through Plaid, we receive the account names, the last digits of the account number, balances and transactions. We never see or store your bank password; you enter it in Plaid's window, not ours.
• Files you upload: bank and card statements, and the business records in them.
• Your bookkeeping: the categories, rules and decisions you make, and the books Metreks builds from them.
• Early access sign-ups: your name, email, phone number and how you do your books today, used only to contact you about Metreks.
• Basic technical data: a sign-in cookie, and server logs (such as IP address and time of request) kept by our hosting provider for security.

How we use it

Only to provide Metreks to you: building and reconciling your books, showing your reports, answering your questions in Metreks AI, keeping your account secure, and contacting you about your account. We do not sell your data, use it for advertising, or share it with anyone to market to you.

Who we share it with

Only the service providers that run Metreks, each for its one job:

• Plaid: connects your bank and card accounts with your permission. See Plaid's End User Privacy Policy.
• Vercel: hosts the Metreks website (United States).
• Neon: hosts the Metreks database (United States).
• Anthropic: powers Metreks AI. Transaction descriptions and amounts that Metreks can't categorize by itself, and the questions you ask, are sent to Anthropic's Claude to answer, under Anthropic's commercial terms.

We may also disclose data if the law requires it. If you invite an accountant or teammate, they see the companies you give them access to.

How we protect it

All connections are encrypted (TLS). Data is encrypted at rest, and bank access tokens get an extra layer of encryption before they're stored. Each company's data is walled off in the database so users only see the companies they belong to. Connecting a bank requires 2-step verification. Bank access is read-only: Metreks can never move money.

How long we keep it, and deleting it

We keep your data while your account is open, because your books depend on it. You can revoke Metreks's access to a bank at any time through Plaid (my.plaid.com) or by emailing privacy@metreks.com. The workspace owner can delete the workspace, all of its data and their account immediately in Settings → Delete workspace; this also ends our access to every connected bank. You can also ask us by email and we'll delete it within 30 days. Deleted data leaves our database backups within 7 days. We keep a record only where the law requires it.

Your choices and rights

You can ask to see, correct, export or delete your data by emailing privacy@metreks.com. Depending on where you live (for example in Canada under PIPEDA, or in US states such as California), you may have further rights, and we'll honor them.

Cookies

We use only the cookies Metreks needs to keep you signed in. We don't use advertising or tracking cookies.

Changes

If we change this policy, we'll update the date above, and tell you by email or in the app before a significant change takes effect.