Effective date: March 10, 2026
Bilustek, LLC ("Company", "we", "us") operates KasaBook ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your Google account ID, name, and email address.
You may upload or enter financial data including expense records, vendor names, categories, amounts, currencies, payment methods, reference numbers, and notes. This data is stored securely and is only accessible within your workspace.
When you use Smart Scan or AI Import, you may upload files (PDF, images, spreadsheets). These files are processed in memory for data extraction and are not permanently stored on our servers after processing is complete.
We automatically collect information about how you interact with the Service, including AI token consumption, feature usage patterns, timestamps, and session metadata. This data is used for billing, analytics, and service improvement.
We collect standard technical information such as your IP address, browser type, operating system, and device identifiers through server logs and cookies.
| Purpose | Data Used |
|---|---|
| Provide and operate the Service | Account info, financial data |
| AI-powered features (chat, insights, scan) | Financial data summaries sent to OpenAI API |
| Process payments | Email, subscription plan (via Stripe) |
| Authenticate your identity | Email, password hash, Google ID |
| Monitor usage and enforce quotas | Token consumption, feature usage |
| Improve the Service | Aggregated, anonymized usage patterns |
| Communicate with you | Email address |
We share limited data with the following third-party providers:
We implement industry-standard security measures to protect your data, including:
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and financial records within 30 days, except where retention is required by law (e.g., billing records for tax compliance).
Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at info@bilustek.com.
The Service uses essential cookies and local storage for authentication (JWT tokens) and user preferences. We do not use third-party tracking cookies or advertising cookies.
The Service is not intended for use by children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.
Your data may be processed in the United States where our servers are located. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international transfers.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service at least 30 days before they take effect. The "Effective date" at the top of this page indicates when the policy was last revised.
If you have questions or concerns about this Privacy Policy or your data, contact us at info@bilustek.com.
Bilustek, LLC
Delaware, USA