Privacy Policy
Effective Date & Last Updated: September 1, 2026
Mogul Books is built exclusively for real estate investors and operators. We do not sell, rent, monetize, or share your proprietary financial transactions, rental revenues, or portfolio data with third-party advertisers. Your financial records are isolated via strict row-level database security and used solely to maintain your general ledger, financial statements, and automated tax rollups.
1Introduction & Scope
This Privacy Policy explains how Mogul Books LLC ("Mogul Books", "we", "us", or "our") collects, uses, processes, and safeguards information when you access or use our website (mogul-books.com), software applications, APIs, and double-entry operating ledger platform (collectively, the "Services").
By creating an account, connecting a bank account, or entering real estate records into Mogul Books, you acknowledge the collection and handling of your information as outlined in this policy.
2Information We Collect
If you join our beta waitlist, we collect your name, email, portfolio size, current bookkeeping solution, main improvement goal, and any optional feedback you provide. We use these answers to review beta requests and contact you about access. We also use a bot-protection service that processes browser and network signals to help prevent automated abuse of our forms and authentication services.
To provide a purpose-built real estate accounting ledger, we collect information categorized across the following operational scopes:
Email address, mobile phone number (for secure passwordless OTP multi-factor verification), account passwords or passkey credentials, and user role assignments (owner, CPA, bookkeeper, collaborator).
Legal entity structures (LLCs, partnerships, trusts), property addresses, unit configurations, tenant names, lease schedules, vendor records, loan amortization terms, and depreciation assets.
Double-entry journal entries, debits/credits, chart of accounts hierarchies, rental payments received, mortgage splits (principal vs. interest vs. escrow), operating expenses, and Schedule E tax groupings.
IP addresses, browser characteristics, device metadata, timestamped audit log events (who edited or approved an entry), and authentication session tokens.
3Third-Party Integrations & Security Boundaries
Mogul Books integrates with specialized enterprise infrastructure partners. Each integration operates under strict least-privilege security boundaries:
When you link financial institutions, authentication is handled through our bank connectivity provider. Mogul Books never views, receives, or stores your online banking usernames or passwords. The bank connectivity provider supplies Mogul Books with an encrypted read-only access token used solely to pull cleared bank transactions and balances into your ledger inbox.
Subscription fees ($100 annual flat fee) and usage passthroughs are processed by our payment processing provider. Card details are entered via secure client-side iframes and tokenized directly with that provider. Raw credit card numbers and CVVs are never transmitted to or stored on Mogul Books database servers.
When you type natural language entries (e.g. "Paid $1,450 for roof repair at Oak Ave"), the text is processed by third-party AI service providers solely to convert the plain sentence into a structured double-entry debit/credit proposal. Your ledger entries and property details are never used to train public foundation models or shared with ad networks.
Data persistence is governed by PostgreSQL with Row-Level Security (RLS) policies. Authentication magic links and 6-digit OTP verification codes are dispatched via our authenticated email delivery service (noreply@mogul-books.com).
4How We Use Your Information
We process your data solely for legitimate business operations and fulfilling core ledger functionality:
- Ledger Calculations & Tax Readiness: Generating balance sheets, income statements, entity rollups, and Schedule E tax workpapers.
- Bank Reconciliation: Matching bank statement feeds to booked rent receivables and property repair payables.
- Entity Multi-Tenancy: Enforcing strict balance sheet boundaries between distinct LLC legal entities and investor permissions.
- Security & Audit Logging: Authenticating users via passwordless OTP/Passkeys and maintaining immutable audit trails of transaction modifications.
5Security Architecture & Data Isolation
Mogul Books is engineered around strict defense-in-depth security standards:
Row-Level Security (RLS):Every database query executes through database-level RLS policies keyed to your active organization membership. A user belonging to LLC "A" cannot query or view records belonging to LLC "B" unless explicit permission is granted by the account owner.
Encryption in Transit & at Rest: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 encryption. Database storage volumes and credentials are encrypted at rest with industry-standard AES-256 and pgsodium.
6Your Data Rights & Choices (CCPA / GDPR)
Regardless of your geographic jurisdiction, Mogul Books provides comprehensive rights over your personal and financial records:
- Export & Portability: You can export your entire general ledger, chart of accounts, and financial reports to CSV and Excel formats at any time.
- Revocation of Bank Connections: You may unlink any connected bank or credit card account through the Settings interface, instantly invalidating the bank connection access token.
- Account & Data Deletion: You may request permanent deletion of your organization and portfolio records by contacting our privacy team.
7Cookies & Local Storage
Mogul Books uses essential HTTP-only cookies and browser storage strictly to maintain secure user sessions, remember active portfolio selections, and ensure PKCE code verification during login. We do not use third-party tracking cookies across unrelated web domains.
8Changes to This Policy
We may update this Privacy Policy periodically to reflect new platform capabilities or regulatory requirements. Material changes will be communicated via in-app notifications or email dispatch prior to taking effect.
9Contact Our Privacy Team
If you have any questions, data deletion requests, or inquiries regarding our data handling practices, please reach out to us directly: