booktist
TermsLog in →

Privacy Policy

Last updated: June 12, 2026

Plain language: Booktist runs in your browser. When you sign in with Google, your bookkeeping data is saved to your own Google Drive— it never passes through or is stored on our servers. If you just use the demo, your data stays in your browser. We don't sell anything, and there are no patient names or health records involved.

1. Who we are

Booktist is a bookkeeping tool for Canadian dental clinic owners that tracks business overhead — insurance remittance income and operating expenses. We operate under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Contact: privacy@booktist.com.

2. Where your data lives

Booktist is a client-side application. It has no server-side database of your financial records. Your data is stored in one of two places, depending on how you use it:

  • Signed in with Google: Your bookkeeping data is written directly from your browser to a folder named "Booktist" in your own Google Drive, as a single JSON file. We never receive, route, or store a copy of it.
  • Demo mode (not signed in): Your data is kept only in your browser's local storage on your device. It is not transmitted anywhere.

The financial records themselves are business overhead figures from your bank export — deposit and expense amounts, dates, and descriptions. Booktist holds no patient names, no health information, no individual insurance claims, and no payment card data.

3. Google user data & Limited Use

To sign in and save your data, Booktist requests access to your Google account using these scopes:

  • Your name, email, and profile picture (openid, email, profile) — used in your browser to show who is signed in.
  • Per-file Google Drive access (drive.file) — lets Booktist create and manage only the files it creates (the "Booktist" folder and its data file). It cannot see, read, or touch any other file in your Drive.

Booktist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: we access only the files Booktist creates, solely to store and retrieve your bookkeeping data in your browser. We do not transfer this data to our own servers, do not use it for advertising, do not sell it, and do not allow humans to read it (except where you explicitly direct it, or as required by law).

Your Google access token is held only in memory during your session and is never written to our servers. You can revoke Booktist's access at any time at myaccount.google.com/connections.

4. What our servers see

The Booktist app is served as static files. When you use it we do not collect your financial data on the server side. Our hosting provider may process standard, transient web-server logs (such as IP address and request metadata) to deliver the site and protect against abuse, as is typical for any website. We do not use these logs to build profiles or to access your bookkeeping data — which, again, never reaches us.

5. Sharing

We do not sell your data. Ever.

  • Your CPA / accountant: Sharing happens on your terms — you export a CSV, Excel file, or Google Sheet and send it to whomever you choose. Booktist does not transmit your records to third parties on your behalf.
  • Google: Because your data lives in your Google Drive, it is subject to your own agreement with Google and your Google account's privacy and security settings.
  • Legal requirements: We hold essentially no financial data to disclose. If compelled by valid legal process regarding the limited information we do process, we disclose the minimum required and notify you where lawful.

6. Data residency

Your bookkeeping data resides in your Google Drive, in the region and under the terms governed by your own Google account. Demo data never leaves your device. Booktist does not relocate or replicate your financial data to any infrastructure of its own.

7. Retention & deletion — you're in control

  • Delete your data: Open Google Drive and delete the "Booktist" folder (or any file in it). That permanently removes your stored data — there is no separate copy on our side.
  • Clear demo data: Clear your browser's site data for Booktist, or use the in-app reset.
  • Revoke access: Remove Booktist's Google permission at myaccount.google.com/connections.
  • CRA records: You are responsible for retaining your own tax records for the period CRA requires (generally 6 years). Because the file is in your Drive, retention is fully under your control.

8. Your rights under PIPEDA

You have the right to access, correct, export, and delete your information. Because your data is in your own Google Drive and browser, you can exercise most of these directly and immediately. For anything else, contact privacy@booktist.com and we will respond within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.

9. Children

Booktist is a business tool intended for clinic owners and is not directed to anyone under 18.

10. Changes

If we make material changes, we will update the date above and, where we have a way to reach you, give reasonable notice before they take effect.

11. Contact

Booktist · privacy@booktist.com