Privacy
This is a draft for the hosted desk. Have a lawyer review it before anyone pays.
Northline hosts the client and money records a company puts in its book. That includes contacts, invoices, receipts, agreements, expenses, payroll, next steps, ledger entries, and notes a person writes on an account.
Those records are kept so the company can run the desk. They are not sold. People at other companies cannot read them.
An AI provider (Anthropic, Google, or xAI) receives data only when the company saves its own key in Settings and a person asks North something; the question, and any figures North looks up in the book to answer it, are sent to that provider. The key stays in that browser and is not saved in the book. Northline does not include those services.
Notes and drafts are not legal filings, tax returns, or signed contracts.
The owner can export the book or delete the company. Deletion removes the users, the book, and the API key for that company.
Passwords are stored as a hash. The API key is a secret for that company. Sessions expire.