Get early access
Privacy Policy

Privacy Policy

Effective Date: May 2026 | Applicable to CPA and Accounting Professional Users

1. Introduction

Double Line (“we,” “us,” or “our”) is committed to protecting the privacy of our users and their clients’ information. This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with your use of Double Line (“Service”).

Given the sensitive nature of financial data processed through our platform — including client bank statements and financial records — we hold ourselves to the highest standards of data protection and transparency.

2. Information We Collect

2.1 Account and Registration Information

When you create an account, we collect:

  • Name and contact information
  • Firm or organization name and size
  • Billing and payment information (processed by a PCI-compliant payment processor; we do not store raw payment card data)

2.2 Client Financial Data (User Data)

As part of your use of the Service, you may upload on behalf of your clients:

  • Bank statements and financial account records
  • Trial balances, general ledgers, and chart of accounts
  • Business entity information and related financial identifiers

This data is treated as confidential User Data. We process it solely at your direction to provide the Service.

2.3 Usage and Technical Data

We automatically collect certain technical information, including:

  • Log data (IP addresses, browser type, pages visited, timestamps)
  • Device and connection information
  • Feature usage and interaction data (to improve the Service)
  • Error and performance diagnostics

2.4 Communications

If you contact us for support or communicate with us via email or in-app messaging, we retain records of those communications.

3. How We Use Your Information

3.1 To Provide and Improve the Service

  • Process and store financial documents you upload
  • Generate automated financial statements and reports
  • Authenticate your identity and manage your account
  • Provide customer support and respond to inquiries
  • Analyze usage patterns to improve Service features and performance

3.2 Use of Technology Service Providers

To deliver the Service, we work with third-party technology providers, which may include providers of cloud infrastructure, data processing, and AI-assisted features. Where your data is shared with such providers, it is done solely to enable the functionality of the Service and under agreements that require those providers to maintain appropriate confidentiality and security. Third-party providers process User Data only to provide contracted services to Double Line and are contractually prohibited from using User Data for their own purposes, including training public or shared artificial intelligence models.

3.3 Legal and Compliance Purposes

  • To comply with applicable law, regulation, or legal process
  • To enforce our Terms of Use
  • To protect the rights, property, or safety of the Company, our users, or others

3.4 Artificial Intelligence

Double Line uses artificial intelligence technologies to provide its accounting automation services and to continuously improve the quality, reliability, security, and functionality of the Service. These technologies assist in processing customer-provided information, generating accounting work products, and supporting authorized workflows.

User Data is processed only as necessary to provide the services requested by our customers and in accordance with applicable agreements.

We do not use User Data to train foundation models, public AI models, shared machine learning models, or models made available to other customers.

We may use information that has been aggregated and de-identified so that it cannot reasonably identify a customer, customer client, or individual to:

  • Improve our products and services
  • Evaluate system performance and accuracy
  • Enhance security and reliability
  • Conduct internal analytics and research
  • Develop new features and functionality

Before information is used for these purposes, we take reasonable measures to remove or obscure identifiers so that the information cannot reasonably be linked to you, your organization, your clients, or any identifiable individual.

Where Customer Information is processed by third-party service providers, those providers are required to handle the information in accordance with applicable contractual, security, and confidentiality obligations.

Double Line does not sell Customer Information or permit third parties to use Customer Information to train public or shared artificial intelligence models.

Users retain ownership of their User Data. Nothing in this Privacy Policy grants Double Line ownership of User Data or the right to use User Data except as necessary to provide the Service and as otherwise described in this Policy.

For additional information regarding our technical safeguards and security practices, please refer to our Data Processing & Security Policy and Responsible AI Policy.

4. Legal Basis for Processing (US Context)

We process your information based on the following grounds:

  • Contract performance: to fulfill our Service obligations to you
  • Legitimate interests: to improve and secure our platform, prevent fraud, and communicate with you
  • Legal obligation: to comply with applicable U.S. federal and state law
  • Consent: where you have expressly provided consent for specific processing activities

5. Third-Party Service Providers

We engage third-party vendors and technology providers to help deliver the Service. These providers may process data on our behalf in connection with cloud infrastructure, analytics, payments, and other Service functionality. All providers are selected with care and are required to handle data in a manner consistent with this Privacy Policy and applicable law.

Some features of the Service are powered by AI and machine learning technology. Where third-party AI services are used, they process User Data only to provide contracted services to Double Line and are contractually prohibited from using User Data for their own purposes, including training public or shared artificial intelligence models.

6. Data Sharing and Disclosure

We do not sell your personal information or your clients’ financial data. We may share information only in the following limited circumstances:

6.1 Service Providers

We engage third-party vendors to assist in providing the Service, including cloud infrastructure providers, payment processors, and technology providers. All vendors are bound by data processing agreements consistent with this policy.

6.2 Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to prevent harm or protect legal rights.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, User Data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

7. Data Retention

We retain User Data for the duration of your subscription and for a period of 1 year following termination, during which you may export your data. After this period, we will securely delete or anonymize your data, unless retention is required by law.

We retain account and billing information for up to 7 years as required for tax and accounting compliance purposes.

8. Your Rights

As a user of our Service, you have the following rights regarding your data:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request an export of your User Data in a common machine-readable format
  • Objection: Object to certain processing activities

To exercise any of these rights, contact us at: legal@doubleline.io

9. State-Specific Privacy Rights

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to deletion, and the right to opt out of the sale of personal information (we do not sell personal information). Similar rights may apply under laws in Virginia, Colorado, Connecticut, and other states that have enacted comprehensive privacy legislation.

10. Children’s Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. Your continued use of the Service after the effective date constitutes your acceptance of the revised Policy.

12. Contact

For questions, concerns, or requests related to this Privacy Policy, please contact our Privacy Officer at:

Double Line | legal@doubleline.io | 2006 N Sepulveda Blvd, #1019, Manhattan Beach, CA 90266