Skip to content

Security and privacy

How we keep your data safe

You’re trusting us with your business’s money records. Here’s, in plain words, what we can and can’t do with them.

We can read, never move, your money

When you connect MTN MoMo, M-Pesa or a bank, we only read your transactions and balance so we can sort them for you.

We can’t send, withdraw or transfer money from your accounts. You can disconnect at any time from Connected Accounts.

No connection? Upload a statement instead - it works just as well.

Nothing important happens without you

Paying a bill, running payroll, sending a message to a customer or filing anything always needs your clear approval.

Every approval shows the exact amount, who it goes to and when.

A Copilot with guard rails

Copilot suggests, explains and drafts. It shows where every answer comes from, and you can undo what it does.

Copilot never moves money and never files with the tax office. Tax figures come from our rules engine, not guesswork.

Your data is yours - take it any time

Export invoices, transactions, reports and your full books on every plan, including Free.

We never share your data with the tax office or anyone else without your permission, except where the law requires it.

A history of every change

See who added, changed or approved what, and when - including anything Copilot did for you. Finished months can be locked so reports stay the same.

The right access for each person

Owner, Admin, Accountant, Payroll manager or Viewer. Give each person only what they need, and remove access in one click.

Protected sign-in

Your session is protected and signs out when it expires. Extra checks before sensitive actions like payouts are on our roadmap - we’ll tell you when they’re switched on.

Careful with where data lives

We aim to keep your data in an African cloud region where the law and our providers allow, and to limit what leaves it. We’ll publish the details before launch.

Built around local data protection law

We design SmartBuuks around the data protection laws where our customers work, and we’re registering with each regulator before we launch there.

Ghana

Data Protection Act, 2012 (Act 843)

Regulator: Data Protection Commission

Nigeria

Nigeria Data Protection Act 2023

Regulator: Nigeria Data Protection Commission

Kenya

Data Protection Act, 2019

Regulator: Office of the Data Protection Commissioner

Questions about your data?

Ask us any time from the help centre once you’ve signed up.

Start free