Privacy Policy

FortyBooks is a bookkeeping, invoicing and business-finance platform provided by FortyHives Innovations. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the FortyBooks website, web application, mobile applications, support channels and related services.

For privacy laws that distinguish between a controller and a processor, FortyHives Innovations generally acts as the controller for account, subscription, support, security and service-usage information. For personal data that a business customer enters into FortyBooks about its own customers, contacts or staff, the business customer may be the controller and FortyBooks may act as a processor or service provider on its behalf.

We may collect account and identity information such as your name, email address, phone number, business name, country, profile details and authentication information; business records you choose to enter, including customers, products, invoices, estimates, expenses, payments and transaction information; subscription and billing information; support communications; and technical information such as device type, app version, IP address, browser information, diagnostic events, security logs and approximate network-derived location.

We do not need or intend to collect payment-card security codes. Where electronic payments are supported, payment credentials and transaction processing may be handled by regulated third-party payment providers under their own privacy and security terms.

We use information to create and administer accounts, provide requested FortyBooks features, synchronize records across supported devices, process subscriptions, provide customer support, send service notices, protect accounts, prevent fraud and abuse, troubleshoot problems, improve product performance, meet legal obligations and enforce our agreements.

Where required by law, we rely on an appropriate legal basis such as performance of a contract, compliance with a legal obligation, our legitimate interests in operating and securing the service, or consent. You may withdraw consent where consent is the applicable basis, without affecting processing that occurred before withdrawal.

You decide what business information to enter into FortyBooks. If you upload or record personal information about another person, you are responsible for having a lawful basis and providing any notices required by applicable law. You should not use FortyBooks to collect unnecessary sensitive personal information.

Our public website and applications may use strictly necessary storage, cookies or similar technologies for authentication, preferences, security and core functionality. We may also use analytics or diagnostics to understand service performance. Where applicable law requires consent for non-essential cookies or tracking, we will request that consent before using them.

We may share information with carefully selected service providers that help us host infrastructure, deliver email or notifications, process payments, provide analytics, monitor reliability, support authentication or deliver customer support. These providers are permitted to use information only for contracted purposes and subject to appropriate confidentiality and security obligations.

We may also disclose information where required by law, court order or lawful government request; to protect the rights, safety and security of users or the public; to investigate fraud or abuse; or as part of a merger, financing, acquisition or sale of business assets, subject to appropriate safeguards.

FortyBooks and its service providers may process information in countries other than the country where you are located. Where cross-border transfer restrictions apply, we use legally recognized transfer mechanisms and contractual, organizational or technical safeguards appropriate to the circumstances.

We retain personal information for as long as reasonably necessary to provide the service, maintain legitimate business and security records, comply with legal, tax, accounting and regulatory requirements, resolve disputes and enforce agreements. Retention periods vary according to the type of record and applicable obligations.

When an account is deleted, we delete or de-identify information that we are not required or permitted to retain. Residual copies may remain temporarily in secure backups until normal backup rotation completes.

We use administrative, technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure or destruction. Measures may include access controls, encryption in transit, secure credentials, logging, backups and infrastructure monitoring. No internet service can guarantee absolute security, so you should use a strong password and protect access to your devices and account.

Depending on your location and applicable law, you may have rights to access, correct, update, delete, restrict or object to certain processing of your personal information, receive a portable copy of information, withdraw consent, or complain to a data-protection authority. Kenyan users may have rights under the Data Protection Act, 2019 and related regulations. Users in the EEA or UK may have rights under the GDPR or UK GDPR where those laws apply.

If a U.S. state privacy law applies to your relationship with us, you may have additional rights such as access, correction, deletion or information about disclosures. FortyBooks does not sell personal information for money, and we do not knowingly use personal information for cross-context behavioural advertising in a way that would constitute a sale or sharing where such laws apply.

You may request account deletion using the account-deletion option in the FortyBooks app or at https://fortybooks.co.ke/delete-account.html. We may need to verify your identity before completing a request. Certain information may be retained where required for legal, tax, fraud-prevention, security or dispute-resolution purposes.

FortyBooks is designed for businesses and is not directed to children under 18. We do not knowingly create accounts for children or knowingly collect personal information from children through the service. If you believe a child has provided personal information, contact us so we can review and take appropriate action.

FortyBooks may link to or integrate with third-party services such as payment providers, identity providers or app stores. Their processing of information is governed by their own terms and privacy policies. We encourage you to review those policies before using the relevant service.

We may update this Privacy Policy to reflect changes to FortyBooks, legal requirements or our practices. We will post the revised version with a new “Last updated” date and, where required, provide additional notice of material changes.

For privacy questions, rights requests or complaints, contact support@fortybooks.co.ke. You may also have the right to contact the relevant data-protection regulator in your jurisdiction, including the Office of the Data Protection Commissioner in Kenya where applicable.