Privacy
This is the plain-English version. It is a working draft, written by Levee, pending review by a lawyer before launch. If something in here matters to you and is not yet clear, send a note through the contact form on the home page and Levee will answer personally.
Who runs this
Coming Up Roses Bookkeeping and Notary is owned and operated by Levee Rose, a licensed bookkeeper and mobile notary working in upstate New York. Levee is one person, not a company with a back office. When you write in, it is Levee who reads it.
What we collect
When you send a note through the contact form on the home page, we receive your name (or whatever you put in the name field), an email address or other way to reach you back, and the message you wrote about your business. That is the entire contact form.
When you become a client, we ask for the information a bookkeeper needs to do the work: legal and operating business names, your state and entity type, any other names you operate under, the bank, processor, and platform accounts you want connected, and the records that go with those. You decide what to share. Anything you do not share, we do not have.
Where it lives
Your records live in a private cloud database run by Supabase, hosted on Amazon Web Services in the United States (us-east-1, Virginia). The database is encrypted at rest by the provider. Row-level rules at the database itself make sure each bookkeeper can only read their own client records. A client cannot see another client's data. A bookkeeper cannot see another bookkeeper's clients.
Login is handled by a magic link sent to your email. We do not store passwords. The session uses a signed cookie that is set on your device and is marked secure and HTTP-only.
Who can see your information
Your bookkeeper (Levee, for now) is the only person who can see your business records. The database provider and the cloud host can technically access the underlying systems, the way every cloud service can; they are bound by their own contracts and policies, and they do not have a reason to read your records, and they do not.
We do not sell your information. We do not share it with marketing partners. We do not feed it into outside analytics or training systems. We do not pass it to advertising networks.
The AI assistant inside the app
The bookkeeper desk has an assistant overlay. Today, that assistant is a small rule engine, not a large language model. It draws on standing rules you have confirmed for a specific client and answers from a fixed set of patterns. It does not send your client's information to a third-party AI service. If that ever changes, this page will be updated before the change ships, and you will see it called out clearly in the app.
What you can ask us to do
You can ask for a copy of everything we hold about you and your business. We will send it back as plain files you can open. You can ask us to delete it; we will delete what is not legally required to keep (some bookkeeping records must be retained under tax law). You can ask us to correct anything that is wrong. You can ask which connected accounts and integrations we currently hold credentials for, and ask us to disconnect any of them.
For any of those, write to hello@cominguproses.biz. We aim to answer inside one business week.
Cookies and tracking
The site uses a session cookie to keep you signed in. That is the only tracking. There is no analytics beacon, no advertising pixel, no third-party tag of any kind. If you visit the site without signing in, no cookie is set.
If something goes wrong
If we discover that someone got into a record they should not have seen, we will tell affected clients directly, as soon as we have a clear picture of what happened and what was touched. We will not bury it.
Adult-content creators, a specific note
A meaningful share of the people Levee works with are adult-content creators. Their books are a normal business and are treated as such. We use registered agents and naming discretion so legal names stay off filings that do not require them. We do not flag, label, or treat these clients differently inside the system, and we do not share their information with any payment processor or platform that does not already have an underwriting relationship with them.