Privacy

Account data: name, email, hashed password, optional avatar.

Company data: the e-Financials companies you connect, including their bank statements, receipts, invoices, and journal entries.

Service data: logs, IP addresses (truncated to /24), browser type, and usage telemetry.

We process the data you give us to provide the Service. We don't sell your data. We don't share it with third parties except as needed to provide the Service (e.g., the OpenRouter API for the AI extraction, e-Financials to post entries, the bank parser to read your statement).

You paste your e-Financials API key during onboarding. We encrypt it with AES-256-GCM using a per-tenant data key. We decrypt your API key only in memory at the moment of posting — never log it, never echo it back to the UI.

You can revoke the key from e-Financials anytime; Kirje stops posting immediately.

Database: Neon Postgres (eu-central-1). Receipt files: S3 (eu-central-1). AI calls: routed through OpenRouter to EU-resident models when available; fall back to US-resident models otherwise.

While your account is active. After account deletion we wipe personal data within 30 days, except where retention is required by law (tax records: 7 years in Estonia). Consent log entries are kept for the duration of the consent (max 1 year) plus 1 year for audit.

You have the right to access, correct, and delete your data; export your data; and lodge a complaint with the Estonian Data Protection Inspectorate (AKI). You can also change or revoke your cookie consent at any time via the Cookie settings link in the footer.

Encryption at rest and in transit. Per-tenant data isolation. Annual third-party security audit. Report vulnerabilities to security@kirje.ee

We use cookies in three categories. Essential cookies are always on. Analytics and marketing cookies only fire if you've consented — you can change your choice at any time via the Cookie settings link in the footer, or via the button below.

Cookies we set:

Questions? Email privacy@kirje.ee.