Privacy Policy

1.Overview

Alto Buro, LLC (“we,” “us,” or “our”) designs and builds custom CRM client portals for service businesses, and publishes desktop software including BarLedger, an inventory application for bars and restaurants, and Affiant Statements, a bank statement extraction tool. This policy covers this website, the services we provide to business clients, and both applications.

2.What We Collect When You Visit This Site

• Standard server logs kept by our web host, including IP address, browser type, and the pages you view
• Analytics data through Google Analytics, used to understand which pages people read
• The cookie preferences you set through the consent banner

This site has no contact forms. Every enquiry link opens your own email program, and every booking link opens our scheduling page, so nothing is submitted to us through the site itself.

3.What We Collect When You Contact Us

When you email us or book a consultation through Zoom Scheduler, we receive your name, your email address, whatever you choose to tell us about your business, and the time you selected. Zoom Scheduler is operated by Zoom and is subject to Zoom’s own privacy policy.

4.Client Data in the Systems We Build

This is the section that matters most if we build your portal.

• Your client records live in your own Assembly workspace, under your account. They are not copied into any system of ours.
• The dashboards and applications we build hold no data of their own. They request information, display it, and discard it.
• Where a build connects to Google Workspace, Zoom, or another tool you already use, it reaches only what that connection requires, using credentials you have granted.
• Credentials are held in secured server configuration, never in code, in browsers, or in logs.
• Any access we hold to your workspace during a build is granted by you and can be withdrawn by you at any time.

If we built your portal, the records inside it belong to you. Requests from your own customers about their data should come to you rather than to us, and we will assist you in answering them.

5.BarLedger License Holders

BarLedger is sold as a one-time perpetual license. For anyone holding a license, we hold the following:

• Full name and email address provided during software activation
• License key and hardware identifier, used to validate the license and keep it within the number of machines the license allows
• Payment records processed through Stripe. We do not store card numbers.
• Basic usage data sent to our backend for license validation

6.Affiant Statements Subscribers

Affiant Statements is a Windows application that reads bank and credit card statements and writes the transactions into a workbook. It is sold as a monthly subscription. Two things about how it works decide what we hold.

Your statements never reach us. The application runs on your computer and uses your own Anthropic API key. Statement files go from your computer directly to Anthropic under your own account. They do not pass through our servers, and we never receive, store, or process them. The workbook the application produces is written to your computer. Your API key is stored on your computer and is never sent to us.

Your use of Anthropic is your own agreement. Anthropic processes your statements under the terms of your own Anthropic account. We are not a party to that agreement, we have no access to your key, and we cannot see anything you send there.

The application contacts our licensing server to confirm your subscription is active. That request carries your license key, a one way hash of a hardware identifier for your computer, and the version of the application. It carries no part of any statement, no file names, and no client names.

For subscribers we hold:

• Full name and email address given at checkout
• License key, and the hashed hardware identifier for the computer it is activated on, used to keep the license within the one computer it allows
• Payment records processed through Stripe. We do not store card numbers.
• The date of the most recent license check, used to confirm the subscription is in use

If your subscription ends, the application stops working. The workbooks it already produced, and the settings and processed page cache on your computer, are yours and are untouched by that.

7.Service Providers We Rely On

Assembly for client portals, Railway for application hosting, Google for Workspace connections and website analytics, Zoom for consultation booking, Stripe for payments, Resend for transactional email, and IONOS for website hosting. Anthropic is used by Affiant Statements under your own account rather than ours, and is not a provider we engage on your behalf.

We do not sell, rent, or trade your personal information. We share it only where doing so is necessary to deliver the services described here.

8.Cookies and Analytics

This site sets cookies for analytics and for remembering your consent choices. You can accept or decline non essential cookies through the banner, and you can change that choice at any time. Web fonts on this site are served by Google, which means Google receives a request from your browser each time a page loads.

9.How Long We Keep Information

Website analytics are retained according to our Google Analytics settings. Project records, including correspondence and build documentation, are kept for the life of the engagement and for up to 3 years afterward for support and accounting purposes. License and subscription records are kept for as long as the license or subscription is active, and for up to 3 years after it ends, whether it ends by deactivation, by cancellation, or by a lapsed payment. We keep them that long for support and accounting.

10.Your Rights

You may ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us at the address below and we will respond within 30 days.

11.Changes to This Policy

We will update this page whenever our services or our providers change, and we will change the date at the top when we do.

12.Contact