This Privacy Policy explains how Berryhill Consulting LLC (“Rekonix Lite,” “we,” “us,” or “our”) handles personal information through lite.rekonix.com (the “Service”). It is a privacy notice, not a request for blanket consent. Where consent is legally required, we request it separately.
1. What the Service does
You upload up to twelve months of bank, credit-card and loan statements for a business, as PDFs or as CSV, Excel or QBO/QFX/OFX exports. The Service reads and categorizes every transaction and produces a Balance Sheet and a Profit and Loss as a packet, paid per packet. The person who signs in owns the packets they create; nothing in a packet is visible to any other customer.
2. Information we collect
Account information
- Your email address, which is also how you sign in (we email a six-digit code that works once), and, if you choose to set one, a password. We never store the password itself, only a scrambled form of it that cannot be turned back into the password.
- Session and security records: sign-in times, IP address, browser type.
- Communications with support and records of purchases.
Statement and business information you submit
- A statement you drop on the landing page for a first look, before you give an email, is held under a temporary account so you can come back to it. It becomes part of your account when you sign in; if you never do, what was read from it is deleted with the temporary account after 30 days, and the file itself is kept 12 months (section 6).
- What is printed in the statement files you upload: account names, the last four digits of account numbers, balances, dates, transaction descriptions, payees and amounts. The file itself is kept as section 6 says, and each read sends it to a third-party document processor (section 4). We do not store the account number printed on the statement; transaction descriptions are kept as the bank printed them.
- The business name, business type, period and delivery email you enter for a packet, categorization choices you make, custom categories, fixed-asset details and depreciation schedules you add, and an optional logo.
- The reports produced from that information.
Payment information
- Stripe handles payment-card details directly; we do not receive or store full card numbers. We keep the payment reference, amount, status and receipt email for each purchase. If you check “Save this card for next time”, Stripe keeps the card against a customer record for your account and we keep only the card’s brand, last four digits and expiry, so a later purchase can be made in one click; you can remove the saved card from your account page at any time.
Information collected automatically
- IP address, browser and device type, requested pages, timestamps, error and security events, and similar technical logs.
- Which steps of the Service are reached (for example landing, upload, preview, purchase), so we can see where people get stuck. Before sign-in this is keyed to a hash of address and browser that changes daily and is not stored in a cookie; after sign-in it is tied to your account.
- Strictly necessary cookies for sign-in and security. We do not use advertising or cross-site tracking cookies, and no third-party analytics script runs on the Service.
3. How we use information
- To read and categorize the statements you upload, build your reports, and deliver the packet you paid for.
- To sign you in, keep your packets private to you, protect the Service, detect misuse and investigate incidents.
- To process purchases, receipts and refunds.
- To respond to support requests and send service, security, billing and legal notices.
- To comply with law, valid legal process and enforceable rights.
- To read your statement files again, and to test improvements to how statements are read, using the files we keep (section 6), unless you turn that use off for a packet.
- To create aggregated or deidentified information (such as how many statements a packet typically holds) to measure, secure and improve the Service, without attempting to reidentify anyone.
We do not sell personal information, share it for cross-context behavioral advertising, use financial information for advertising, or use your statements or reports to train general-purpose AI models.
4. AI-assisted processing
Statements are read and transactions are categorized by one or more third-party document-processing models. The providers are named on the Subprocessors page, which is updated before a new provider begins processing; we may add, switch between or replace providers, for example to keep the Service available. We send the statement content and our instructions to a provider solely to produce the extraction and categorization, under commercial terms that prohibit training on your content; what a provider does with what it is sent is under those terms, which we do not control. Every read is checked against the balances printed on the statement, and you review categories before a report is produced. Outputs can still be wrong; the reports are a starting point for you or your accountant, not professional advice.
5. How we disclose information
- Service providers. Hosting, database and email delivery (Amazon Web Services, including Amazon SES), document reading and categorization (the providers listed on the Subprocessors page) and payment processing (Stripe) process information for operational purposes under their contracts.
- Our staff. The people who run the Service can reach the information in your account, and do so only when needed to support you (for example, to answer a question about a statement or a category), to secure the Service, or to investigate an incident. The current list is on the Subprocessors page.
- At your direction. The packet is emailed to the delivery address you enter (or, for an account with a firm profile, to the firm’s own address), and you may download and share your reports as you choose.
- Legal and safety. We may disclose information when required by law or valid process, or when reasonably necessary to protect rights, safety, security and the integrity of the Service.
- Business transaction. Information may transfer in a financing, reorganization, merger, acquisition or sale, subject to confidentiality and this Policy.
6. Retention and deletion
| Category | Retention approach |
|---|---|
| Account records | While the account exists and afterward as needed for closure, disputes, security, tax and legal obligations. |
| Uploaded statement files | Kept encrypted for 12 months from upload, then deleted automatically. Used to read the statement again and to test improvements to how statements are read, by Rekonix only; never shared, sold, or used by us to train AI models. Deleted sooner if you delete them, remove the statement or the packet, close your account, or turn off their use for testing (then once the packet is downloaded). Kept longer only if you choose “Keep my statement files until I delete them”. A file from the free first look is kept the same 12 months. Each read sends the file to a third-party document processor (section 4). |
| Transactions and balances read from your statements, categorized transactions and reports | Kept so you can return to a packet, add a year, or re-download a report. Deleted on request or after verified account closure, subject to legal holds. |
| Purchase and receipt evidence | For the transaction lifecycle and afterward as required for tax, accounting, payment disputes, fraud prevention and legal compliance. |
| Security and technical logs | For a limited period appropriate to security, diagnostics, incident response and legal needs. |
| Backups | Database backups are kept for 7 days, so deleted information leaves the backups within 7 days of deletion, unless preservation is legally required. |
To close your account or request deletion, write from the account’s own email address to support@rekonix.com. We verify that the request comes from the account holder, explain any records that must be retained (purchase evidence stays with Stripe and in our purchase records), delete the account and everything in it, and confirm the date and the 7-day backup window. Download reports you need to keep before closure.
7. Security
We use safeguards designed for financial information: encrypted transport, encryption at rest, access limited to your account (and to our staff only when needed to support you, secure the Service or investigate an incident), one-time sign-in codes that expire, audit records and protected secrets. No system is completely secure. You are responsible for the security of your email account, which controls sign-in, and for anything you download or forward. Report suspected incidents to support@rekonix.com.
8. Your privacy rights
Depending on applicable law, you may request access, correction, deletion, portability or restriction, may appeal a denied request, and may use an authorized agent. You will not be discriminated against for exercising a privacy right. Because we do not sell or share personal information for behavioral advertising, no sale/share opt-out is necessary. Contact support@rekonix.com; we will verify the request and respond as required by law.
Statements often contain information about other people (payees, customers, employees). The account holder who uploaded the statement controls that record; we may direct a request to them and will assist as required by law.
9. Children
The Service is for adults and businesses and is not directed to children.
10. International processing
Rekonix Lite is based in the United States and hosted there. Providers may process information in the United States and other countries where they operate. Do not use the Service where doing so would violate applicable localization or transfer restrictions.
11. Changes to this Policy
We may update this Policy as the Service and the law change. We will update the date above and give additional notice when appropriate for a material change. Prior versions may be requested from us.
12. Contact
Contact support@rekonix.com for privacy questions, rights requests, complaints, or information about our data practices.