Privacy Policy DETAILS...

PRIVACY POLICY 

Stary Metrics, LLC

__________________________________________________________________________________

Effective Date: June 26, 2026

Last Updated: September 21, 2026

1. INTRODUCTION

Stary Metrics, LLC ("we," "our," or "us") respects your privacy and is committed to protecting the personal and financial information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and your rights regarding your data.

This policy applies to information collected through our bookkeeping services agreement, client portal, email communications, and other interactions related to the services we provide.

2. COMPANY INFORMATION

* Company Name: Stary Metrics, LLC

* Legal Entity: Michigan Limited Liability Company

* Address: PO Box 387, Dimondale, MI 48821

* Designated Notice Email: Valerie@StaryMetrics.com

* Governing Law: State of Michigan

3. INFORMATION WE COLLECT

3.1 Client Information Provided Directly

* Business Identifiers - Legal business name, DBA, entity type, state of organization

* Contact Information - Principal business address, designated notice email, authorized representative name and title

* Financial Data - Bank accounts, credit card accounts, loan accounts, transaction records, income and expense records

* Accounting Records - Invoices, vendor bills, payroll reports, financial statements, tax documents

* Login Credentials - Delegated/user-level access tokens; shared passwords (when delegated access unavailable)

* Payment Information - Business bank account or payment card details (processed through secure payment processor)

3.2 Information Generated During Services

* Client Results - Financial reports, reconciliations, organized records, and deliverables produced under the agreement

* Communication Records - Emails, client portal messages, approval records, and change orders

3.3 Technical Data

* System access logs and session information

* Portal usage data (if applicable)

NOTE: The categories listed above represent the primary types of personal information we collect. Depending on the nature of the Services, the Client's business operations, and applicable requirements, additional related information may be collected to fulfill our service obligations and legal responsibilities.

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

* Perform bookkeeping services as described in your service agreement (Contract performance)

* Process payments and manage billing (Contract performance and legitimate business interests)

* Communicate regarding your account and deliverables (Contract performance)

* Maintain records required by law or professional standards (Legal obligation and legitimate business interests)

* Detect and prevent security incidents (Legitimate security interests)

* Provide transition assistance upon termination (Contract performance)

5. INFORMATION WE SHARE

5.1 Authorized Service Providers

We may share client information with third-party technology providers ("Authorized Service Providers") which are necessary to deliver our services. These include:

* Accounting Platforms - QuickBooks Online 

* Payment Processors - Secure payment processing systems for AutoPay/Auto-debit

* Password Managers – Proton Pass, Bitwarden, 1Password (for credential sharing when delegated access unavailable)

* Cloud Storage - Secure cloud-storage providers for document management

* Backup Services - Disaster recovery and backup providers

All Authorized Service Providers are subject to commercially reasonable confidentiality and data-security obligations consistent with the Security Standard.

5.2 Other Permitted Disclosures

* Legal Requirements - When required by subpoena, court order, or applicable law (with notice where permitted)

* Security Incidents - As required under Michigan Identity Theft Protection Act and other applicable breach notification laws

* Professional Advisors - Your CPA or tax professional (for tax support services)

* Successor Entity - In the event of business acquisition or succession (with client termination right)

6. DATA SECURITY

6.1 Security Standard

We maintain the following security measures consistent with industry standards for bookkeeping services:

* Encryption - Secure cloud-based systems with built-in encryption

* Authentication - Multi-factor authentication on all systems accessing Client data

* Credential Management - Passwords transmitted only through secure shared password managers, not via email, SMS, or text

* Access Controls - Role-based and delegated access preferred over shared primary credentials

* Vendor Management - Reasonable selection and management of Authorized Service Providers

6.2 Security Incident Protocol

* Within 48 hours of discovery - Good-faith preliminary assessment of suspected security incident

* Without unreasonable delay - Client notification if incident may materially affect data

* As required by law - Compliance with Michigan Identity Theft Protection Act (MCL 445.72) and other breach notification laws

7. DATA RETENTION

7.1 Standard Retention Period

* Client accounting records and final reports - 7 years after end of calendar year in which record was created/received

* Rolling disaster-recovery backups - Up to 90 days after scheduled deletion before overwrite

* Client Results after termination - As required for handoff; thereafter retained per above standards

7.2 Early Deletion Requests

Clients may request deletion of specific nonessential records before the scheduled deletion date by submitting the provided Data Deletion Request Form. We may deny or defer requests where retention is reasonably necessary for:

* Active Services

* Legal compliance

* Professional standards

* Defense of potential claims

7.3 Extended Legal Retention

We may retain records beyond scheduled periods when required by:

* Federal, state, or local law

* Subpoena or litigation hold

* Professional standards

* Reasonable defense of actual or threatened legal claims

Records are deleted when the additional retention basis ends.

8. CLIENT RIGHTS

Depending on applicable law, you may have the following rights regarding your data:

* Access - Request copies of your financial data and records

* Correction - Request correction of inaccurate data through client portal or email

* Deletion - Submit Data Deletion Request Form (subject to Section 7 exceptions)

* Portability - Receive data export in standard formats (QBO export, CSV, or Excel)

* Opt-Out - We do not sell personal information to third parties

Upon termination of services, you may request data export and will receive completed results within 5 business days.

9. INTERNATIONAL TRANSFERS

Currently, Stary Metrics, LLC operates from Michigan, USA. If data is transferred outside the United States in the future, we will implement appropriate safeguards including Standard Contractual Clauses or other approved mechanisms.

10. CHILDREN'S PRIVACY

Our services are intended solely for business or commercial purposes. We do not knowingly collect personal information from individuals under age 18. If you believe we have inadvertently collected such information, please contact us immediately.

11. POLICY UPDATES

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

* Post the updated policy on our website/client portal

* Include a new "Last Updated" date

* Notify clients of material changes where appropriate

You are encouraged to review this policy regularly. Continued use of our services after updates constitutes acceptance of the revised policy.

12. CONTACT INFORMATION

To exercise your privacy rights, ask questions, or report concerns about this Privacy Policy:

* Email: Valerie@StaryMetrics.com

* Mail: Stary Metrics, LLC, PO Box 387, Dimondale, MI 48821

* Notice: Formal notices delivered per Section 17 of our Services Agreement

13. CALIFORNIA RESIDENTS (CCPA/CPRA ADDENDUM)

If you are a California resident, the following additional rights apply:

* Right to Know - Categories of personal information collected in last 12 months

* Right to Delete - Request deletion of personal information (subject to exceptions)

* Right to Opt-Out - Do Not Sell or Share link (if we sell/share data in the future)

* Right to Limit - Limit use of sensitive personal information

* Non-Discrimination - We will not discriminate against you for exercising rights

NOTE: As of this writing, our services are primarily B2B. If your information qualifies as consumer personal information under CCPA, the above rights apply.

14. CONSENT AND ACCEPTANCE

By using our services, providing us with information, or continuing to engage our services after receiving this Privacy Policy, you acknowledge that you have read and understood this policy and consent to the data practices described herein.