Steadfast Accounting PC, Pasco, Washington · Last updated November 13, 2026
This policy covers the Steadfast iPhone app and the services behind it. In short, we use your bank data only to keep your books, and we never sell it.
From your bank, through Plaid. When you link an account, Plaid gives us:
the account's name, type and last 4 digits
your transactions: date, amount, merchant, description and location when the bank provides it
Plaid can also return account balances. The app doesn't use or store balances today. We don't get your bank username or password. You sign in to your bank inside Plaid, and Plaid never shares those details with us. The connection is read-only, so we can't move money.
From you, in the app.
Your name, email and phone
Your answers about charges, any notes, and the receipt photos you take
Your notification time and your choice of Face ID lock
A device token so we can send you notifications
Automatically. A record of sign-ins, bank links and disconnects, and changes to your data (our audit log). It never includes codes, passwords or full account numbers.
For one thing only: keeping your business's books. The app looks over your charges and asks you about the few your accountant can't place on their own. Your answers and receipts are what your accountant uses to book them.
We never sell your data.
We don't use it for ads, and we don't share it with advertisers.
We never use your data for any other client.
You and the other people at your business who have access in the app
Steadfast staff who keep your books
Service providers we need to run the app: Plaid (bank connection), our hosting provider, and Apple (to deliver notifications). Each one only gets what it needs for that job.
We'll share data if the law requires it, for example a valid subpoena. If we can, we'll tell you first.
Bank data is kept while the account stays linked. When you disconnect an account, we remove the Plaid connection right away and delete that account's stored bank data within 30 days.
Answers, notes and receipt photos are kept while you're a client. They're deleted within 30 days after you leave. Any we used as support for your books are first saved to your workpapers, which we keep for 7 years like all tax and accounting records.
The audit log is kept for 1 year.
Sign-in codes expire after 10 minutes.
Disconnect an account: Accounts tab → Disconnect under that bank.
Delete your account: Settings → Delete my account. This deletes your sign-in, your devices and your settings right away. Your past answers stay with your books, but your name comes off them. If nobody else at your business still uses the app, we disconnect every linked bank too.
Ask us: email willson@fast.cpa for a copy of your data or to delete it. We answer within 30 days.
All traffic to the app and our servers is encrypted (HTTPS).
The key that lets us read from your bank is encrypted on our server and never goes to your phone or into logs. Our database and file storage are encrypted at rest.
You sign in with a one-time code sent to your email. Before linking a bank, you also confirm it's you with Face ID or your passcode.
Only Steadfast staff can see client data, and production systems need two-step sign-in.
We follow a written information security plan, as the FTC Safeguards Rule requires of tax and accounting firms.
We use Plaid Inc. to connect your bank. By linking an account, you also agree to Plaid's End User Privacy Policy: https://plaid.com/legal/#end-user-privacy-policy
The app is for businesses. It isn't meant for anyone under 18.
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.
Willson Franklin, CPA · Steadfast Accounting PC · willson@fast.cpa
