Privacy Policy

We are Simple Financial Solutions Limited ("Foxel", "we", "us"), an Illinois company. This Privacy Policy explains what personal and financial information we collect, how we use it, who we share it with, and what rights you have. It applies to our website, products, and services.

1. Who we are

Simple Financial Solutions Limited · 10101 S. Roberts Rd. STE 202 · Palos Hills, IL 60465 · EIN 86-2098028

Controller for GDPR / CCPA purposes: Simple Financial Solutions Limited. Contact: privacy@foxelfin.com.

2. Information we collect

We collect only what we need to deliver our services:

Account — name, email, phone, business name, EIN, authentication tokens (via Clerk).
Financial — bank-account connections (via Plaid, read-only), transactions, invoices, payment history, chart-of-accounts data.
Tax — only if you engage us for tax preparation: W-2s, 1099s, prior returns, dependent information, Social Security numbers (encrypted at rest). Governed by IRS §7216 — see the separate IRS 7216 Consent.
Documents — anything you upload to the document vault.
Usage — pages visited, actions taken, errors (logged), IP address, user agent.
Analytics — only with your consent (see Cookie Policy). We use Vercel Analytics by default (cookieless).

3. How we use information

Deliver the services you asked for (bookkeeping, tax prep, document storage, invoicing, scheduling, e-signatures).
Communicate with you about your account, deadlines, and compliance events.
Comply with legal obligations (tax law, FTC Safeguards Rule, GLBA, Illinois PIPA).
Improve the product (de-identified usage data only).
Prevent fraud and abuse.

We do not sell your personal information to third parties. See the CCPA / CPRA section below.

4. Legal bases

Under GDPR Article 6 we rely on:

Contract — most account and service operations.
Legal obligation — tax recordkeeping, breach notification, FTC Safeguards logging.
Legitimate interests — security, fraud prevention, aggregate analytics.
Consent — marketing emails, analytics cookies, IRS §7216 disclosures, automated decisions.

5. Who we share with

We share information only with the sub-processors listed on the public Sub-processors page. Each is contractually bound to confidentiality and processing restrictions, and operates under our standard DPA. We do not share your information with any other third party except where required by law or with your explicit consent.

6. Automated decision-making notice

Under GDPR Article 22 and California CPRA, you have the right to know when we use automated decisioning that produces legal or similarly significant effects. Our automation:

Lead scoring — ranks sales leads (does not affect clients).
Transaction categorization — suggests chart-of-accounts categories. A human reviews before anything hits your books.
AI insights — generates financial narratives for your consideration. Not advice.

You may object to any of this at any time via Settings → Privacy.

7. Your rights

Depending on your jurisdiction you may have the right to access, rectify, delete, port, or object to processing of your personal data. US / Illinois residents also have California Shine-the-Light rights if applicable. Exercise any right from Settings → Privacy, or email privacy@foxelfin.com. We respond within 30 days.

> Financial-records retention note: US tax and bookkeeping records are subject to IRS retention requirements (3-7 years). We cannot delete those records for the retention period, but we can anonymize them so you are no longer identifiable.

8. CCPA / CPRA (California residents)

We do not sell or share personal information for cross-context behavioral advertising. California residents can request access, deletion, correction, portability, and limit on use of sensitive personal information. Click Do Not Sell / Share My Information in the footer or email privacy@foxelfin.com. We will not discriminate against you for exercising your rights.

9. Illinois PIPA (breach notification)

If a breach occurs that affects your personal information, we will notify you per the Illinois Personal Information Protection Act (815 ILCS 530), without unreasonable delay. We will also notify the Illinois Attorney General and relevant consumer reporting agencies where required.

10. GLBA Privacy Notice (short-form)

We are a "financial institution" under the Gramm-Leach-Bliley Act. We collect and process nonpublic personal financial information to provide bookkeeping, tax, and related services. We do not share NPI with non-affiliated third parties except as permitted or required by law (sub-processors in Section 5). Our full Privacy Notice is sent annually to active clients. You may opt out of any permitted sharing at Settings → Privacy.

11. Security

AES-256 encryption at rest and TLS 1.2+ in transit. Full compliance program maintained under the FTC Safeguards Rule (16 CFR Part 314), including a designated Qualified Individual, written Information Security Program (WISP), access controls, encryption, monitoring, and employee training. SOC 2 Type I audit scheduled.

12. International transfers

Our servers are in the United States. If you access the service from outside the US, your information is transferred to the US. Our sub-processors operate under appropriate transfer mechanisms (Standard Contractual Clauses where applicable).

13. Children

The services are not directed to children under 13 and we do not knowingly collect their information.

14. Changes

We will notify active clients of material changes via email and post the change log on this page. The current version is tracked in Settings → Privacy.

15. Contact

Privacy / compliance questions: privacy@foxelfin.com · Legal process: legal@foxelfin.com · Postal: Simple Financial Solutions Limited · 10101 S. Roberts Rd. STE 202 · Palos Hills, IL 60465 · EIN 86-2098028