Confidentiality Policy

1. About this policy

This policy explains how Miguelina Rosario, Accountant & Bookkeeper (Exequátur No. 709-24), keeps client information confidential. It applies to direct clients, prospects, CPA firms and the clients of those firms. It is part of my Terms & Conditions and works together with my Privacy Policy.

2. What I consider confidential

All information I receive or create while working with you, including:

• Financial records, bank and credit card statements, receipts and invoices
• Accounting files and reports
• Payroll and tax documents
• Business, customer and vendor information
• Contact details and information from the Initial Consultation form
• Information a CPA firm shares with me about its clients

3. How I protect it

• Multi-factor authentication on my accounts
• An encrypted password manager
• Secure storage, with one private folder per client
• Documents shared only through controlled, private channels
• Access limited to what the work requires

4. Who has access

Only I have access to client information. If I ever work with someone else, they must sign a confidentiality agreement before seeing any client information.

5. Passwords and access

I do not ask for your passwords. I prefer that you send me the information. If you give me access to a bank or other account, it must be read-only. Any credential I receive is stored encrypted in a password manager.

6. Use of AI tools

I use AI tools only to support my work. I do not enter information that identifies my clients, and I review all work myself.

7. White-label work for CPA firms

• I will not contact, solicit or accept work from your firm's clients during our agreement and for 24 months after it ends, unless your firm agrees in writing.
• I will never use or share your clients' information for any purpose other than the work you assign to me.

8. Testimonials and case studies

• I never publish confidential client information.
• Testimonials are published only when you authorize it.
• I use real cases only with your authorization or fully anonymized.

9. When I may disclose information

I share confidential information only when you authorize it or when the law requires it. The service providers I use to run my business are described in my Privacy Policy.

10. When the service ends

• I remove my access to your accounts and systems.
• The documents you gave me are returned to you.
• I keep or delete your records as described in my Privacy Policy.

11. How long this lasts

My duty of confidentiality continues during our work together and after it ends, with no time limit.

12. Contact