Privacy notice
ThumaBooks is a service of Thuma Express Holdings, Inc. This notice covers how we handle personal data on this website today, and how the service handles data once your books are open. Where you are a business customer, the group's Data Processing Agreement also applies to the data inside your books.
Today, on this website
If you register for early access or contact us, we hold your email address and what you told us, so we can reply and let you know when the service opens. Nothing more. The contact and early-access forms open your own email application; nothing you type into them is stored by this website.
Once your books are open
- Account data — your name, phone number and role in each set of books you can access.
- The books themselves — the transactions, documents and entries you and your team record. This is your business's data, processed on your instructions; it is what the product exists to keep.
- Access records — who was given and removed from access to a set of books, kept append-only, because that log is part of what makes the books trustworthy.
- Device and session data — used to secure accounts and detect abuse.
Why
To provide the service; to keep the integrity guarantees the product makes (append-only records are a data-handling promise as much as a feature); to meet record-keeping duties that apply to us; to investigate disputes; and to prevent fraud.
The promise about lenders
We do not use your financial data to make lending decisions about you, and we do not share it with any lender, without your separate, specific and revocable consent. Consent to that is never a condition of using ThumaBooks.
Your rights
Ask for a copy of your personal data, ask us to correct it, or complain: hello@thumabooks.com. Your books themselves you do not need to ask for — export is a button inside the product, complete and machine-readable, at any time. Where a legal duty requires retention, we cannot delete on request, and we will say which duty.
Sharing
With regulators and law enforcement where legally required; with providers processing data on our instructions under contract; and with a revenue authority only where you have instructed a fiscal transmission service to submit your documents. We do not sell personal data.
Where data lives
Where the law of your market requires accounting or tax records to be held within that country, we hold them there — or we tell you plainly that we cannot serve you in that market yet.