Privacy Policy

What we collect and why

Selflyx works in your accounting system under named access you grant. We access only the data necessary for the engagement: setup, reconciliation, month-end close, and agreed summaries that ship with the close. That may include transaction records, chart of accounts, vendor lists, customer lists, and historical financial reports.

We also collect basic contact information you provide directly when you email us: name, email address, firm name and role, solely to respond to your inquiry.

We do not collect payment card data, bank login credentials, social security numbers, personal health information, or any data outside the scope of the engagement. We never ask for bank passwords.

How your data stays controlled

Primary work happens in your own accounting file. Selflyx does not operate a client portal or product dashboard that replaces your books as the system of record.

When exports or summaries are needed for review or delivery, they are stored in engagement-specific folders, transferred through encrypted channels where applicable, and separated by client. Internal notes, review comments, and rule configurations for your engagement stay tied to that engagement and are never sold or used outside it.

Data retention and deletion

We retain access to your accounting software only for the duration of your active engagement. Access and engagement files are retained and deleted according to the applicable service agreement and documented retention requirements.

Contact inquiries are retained only as long as needed to respond and manage the conversation, then deleted according to our retention practice.

Third-party access

Where we connect through a provider’s official access method, we use named users and least privilege. Selflyx never stores your accounting-system login passwords.

We may use subprocessors (for example, email or secure storage tools) only as needed to deliver the engagement. We do not sell, rent or trade your information to any third party. We do not use your financial data for training models, advertising, or any purpose outside your direct engagement.

Security

Selflyx uses named access, multi-factor authentication where available, least-privilege permissions (no payment or bank-admin authority), encrypted communication channels for exports where applicable, and access revocation on exit. Access to client engagements is kept to people who need it for delivery.

Your rights

You may request a summary of any notes or configurations we maintain related to your engagement, request correction of inaccurate information, or request deletion of your contact data at any time by emailing rs@selflyx.com. We respond on business days.

Changes to this policy

If we change this policy, we will update the "Last updated" date at the top of this page. Material changes will be communicated to active clients by email.