Privacy

ReconMatch matches bank deposits to their payouts for bookkeepers. This page says what we keep, who else touches it, and how to remove it. Questions: support@getreconmatch.com.

Who is responsible

The controller of your personal data is Brandon Ta, an individual trading as ReconMatch. Privacy contact: support@getreconmatch.com.

What we store

• Your account: email address and a password hash (sign-in is run by our own GoTrue server).
• Your clients: the company name and country you enter, and who on your team can see them.
• The lines of the exports you upload: dates, amounts, currencies, references and descriptions. We read the file and keep these lines, not the file itself. Columns that hold names, email addresses, postal addresses or phone numbers are dropped before saving. Bank descriptions are kept as written in your statement, and a gap explanation can quote one, so they may contain whatever your bank printed.
• The matches, gaps and explanations we produce, and an activity log of who did what.
• Product events (for example “import uploaded”) and error logs, kept in our own database. They carry ids and counts, not file contents.

Cookies

One session cookie keeps you signed in. It is strictly necessary, not used for tracking. We run no third-party analytics or advertising scripts.

Who else handles data

• Polar (merchant of record) takes your card and sends the invoices. We never see your card number.
• ZeptoMail (Zoho) delivers our emails: sign-in links, invites and billing notices.
• QuickBooks Online and Xero, only once ledger connections are offered (not available yet) and you approve a push. Nothing is sent to a ledger without your click.
• An AI provider you choose (Anthropic, OpenAI, Google Gemini or OpenRouter), only if you add your own API key and ask for a suggestion. The request goes out under your key, names the provider before the first call, and its answer is shown to you for approval.
• Our hosting provider runs the server and the database; backups are nightly database dumps kept for 14 days on that same server only.

Keeping and deleting

Data stays until you remove it. Account → “Download JSON” downloads everything linked to you. Account → “Delete account and data” ends your subscription and deletes your clients, uploaded lines, matches and the account itself. You can also remove one file (“Remove this file” on the import page) or a whole client (“Delete this client”) at any time. Backups roll off after 14 days.

Your rights

You can ask us to access, correct or erase your data at any time, using the buttons above or by email. We answer within 30 days.

Changes

If this page changes in a way that matters, we email account owners before it applies.