← Back to Login

Privacy Policy

Last updated: March 17, 2026

Yukti ("we," "us," or "our") provides automated accounting tools for restaurant operators and their accounting professionals. This privacy notice explains how we collect, use, and protect your information in compliance with the California Consumer Privacy Act (CCPA).

Information We Collect

Account information: Your name, email address, and encrypted password when you create an account.

Business information: Restaurant name, address, and business details you provide during onboarding.

Financial statement data: Revenue amounts, fees, commissions, tax amounts, and other financial data extracted from platform statements (DoorDash, Uber Eats, Grubhub, Toast) that you upload to Yukti.

Accounting integration tokens: If you connect QuickBooks Online, we store encrypted OAuth tokens (AES-256-GCM encryption) to post journal entries on your behalf.

Usage data: Standard server logs including IP addresses, browser type, and pages visited.

How We Use Your Information

We use your information to:

  • Process uploaded financial statements and extract structured data
  • Generate journal entries based on Uniform System of Accounts for Restaurants (USAR) standards
  • Post journal entries to your connected QuickBooks Online account at your explicit direction
  • Calculate sales tax liability and generate tax filing summaries
  • Provide financial reports and analytics for your restaurants
  • Maintain your account and provide customer support

What We Do Not Do

  • We do not sell your personal information. We have not sold personal information in the preceding 12 months.
  • We do not share your financial data with third parties except QuickBooks Online when you explicitly connect your account and direct us to post journal entries.
  • We do not use your financial data for advertising, profiling, or any purpose other than providing our accounting services to you.

Data Retention

We retain your financial data for 8 years from the date of upload, consistent with IRS record-keeping requirements (IRC §6501) and California Department of Tax and Fee Administration (CDTFA) retention requirements. You may request earlier deletion (see Your Rights below), though we may retain data required for legal compliance.

Your Rights Under CCPA

As a California consumer, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Delete your personal information, subject to legal retention requirements
  • Opt out of the sale of personal information (we do not sell your information)
  • Non-discrimination for exercising your privacy rights

Data Security

We protect your information using:

  • Encryption at rest: AES-256-GCM encryption for all OAuth tokens and sensitive credentials
  • Encryption in transit: HTTPS/TLS for all data transmission
  • Session security: JWT-based sessions with 8-hour expiry
  • Password security: bcryptjs hashing with salt rounds for all passwords
  • Access control: Role-based permissions with location-level access validation

Contact Us

To exercise your privacy rights, request data deletion, or ask questions about this policy:

Email: privacy@goyukti.com

We will respond to verified requests within 45 days as required by CCPA.