Privacy policy

Effective September 28, 2026

This policy explains what information SMGM Enterprises, LLC ("SMGM", "we", "us") collects through HomeBooks (the "Service"), how we use it, and the choices you have. We do not sell personal information, and we do not use it for advertising.

1. Information we collect

• Account information: your name, email address, password (stored only as a one-way hash), passkeys and two-factor settings, and your appearance preferences.
• Book data: what you and the people you share a book with enter or import: accounts, transactions, contacts and their addresses, phone numbers and email addresses, invoices, payments, sales tax, budgets, reconciliations and bank statement files you upload.
• Data from QuickBooks Online: when you connect a QuickBooks Online company, we read its company information, lists, transactions and reports from Intuit, with your authorization and read-only, to build and keep your HomeBooks book in step with it. We keep the access tokens Intuit issues encrypted.
• Bank data from SimpleFIN and Plaid (optional): if you choose to connect your bank and card accounts through SimpleFIN Bridge (simplefin.org) or Plaid (plaid.com), you do so with your own SimpleFIN or Plaid account. We then receive from that service, with your authorization and read-only, the accounts you share, their balances and their transactions, to bring them into your book. We keep the access the service grants, and any Plaid keys you enter, encrypted. SimpleFIN and Plaid handle your bank sign-in under their own terms and privacy policies.
• Email: we keep a log of each document or report sent from a book (when, by whom, to whom, the subject and the outcome). If you set up your own outgoing mail server, we keep its settings and your mail password encrypted, and what you send goes through that server. If you have not, what you send goes out from the HomeBooks address in your book's name, with replies directed to the book, and passes through the outgoing mail service set up for HomeBooks. We also send account mail from the HomeBooks address, such as invitations to a book and links to set up two-factor sign-in again; for that mail we keep the address it was sent to, the kind of message, when it was sent and whether it went.
• Records of activity: sign-in records and an audit log of changes made in each book, kept for security and so that the books can be traced. For each sign-in we keep the internet (IP) address it came from.

2. How we use it

Only to provide, secure and support the Service for you and for the people you share a book with: to record and display your books, to import from the services you connect, to send the documents you choose to send, to keep the Service secure, and to answer your requests. Data received from Intuit is used only to provide the Service to the user who connected it.

3. Sharing

We share your information only:

• with the people you give access to a book, as their role allows;
• with services you connect, as needed to carry out what you ask (for example, sending a document through your mail server);
• with the outgoing mail service set up for HomeBooks, as needed to deliver a document or report sent from the HomeBooks address and the account mail we send you (the message, its attachment and the addresses it goes to);
• when required by law, or to protect the rights, property or safety of our users, the public or SMGM.

We do not sell, rent or trade personal information, and we do not share it with advertisers or data brokers.

4. Cookies and similar storage

The Service uses one cookie to keep you signed in, and your browser's local storage for display preferences such as light or dark appearance. A second cookie holds a random code that tells your browser apart from others, so that we can email you when your account is signed in to from a browser we have not seen on it before; we keep only a one-way hash of that code, with your account. We use no advertising or tracking cookies and no third-party analytics.

5. Where your data is kept and how it is protected

Your data is stored on servers operated by SMGM in the United States. Connections to the Service are encrypted with HTTPS; access tokens and mail passwords are encrypted at rest; each book's data is separated from every other book's at the database level; and access is limited to the people you authorize. No system is perfectly secure, and we cannot guarantee absolute security.

6. Retention and deletion

We keep your data while your account is open. You may ask us to export your data or to delete your account and its data by writing to smgm@mailsafe.io. We delete it within 30 days of your request, except where the law requires us to keep it. Copies in backups are removed as the backups expire. Disconnecting QuickBooks Online (in your Intuit account, under apps) stops any further access to it. Disconnecting a bank connection in HomeBooks deletes the access we hold for it and stops any further access; a Plaid connection is also removed at Plaid.

7. Your choices and rights

You may see and correct your information in the Service, export it, and ask us to delete it. Depending on where you live, you may have further rights under the law; write to us and we will respond.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children.

9. Changes to this policy

We will post any change here with its effective date and, for a material change, notify account holders by email or in the Service before it takes effect.

10. Contact

SMGM Enterprises, LLC · smgm@mailsafe.io