Back to Bound
STINGER INDUSTRIES AI
Terms and privacy.
Bound is bookkeeping software. It is not a certified public accountant, not a filing, and it does not hold your money.
Effective 2 September 2026. Questions and deletion requests: privacy@stingerindustriesai.com.
Back to Bound
Disclosures
Not a CPA and not a filing
Stinger Bound is bookkeeping software. It is not a certified public accountant, not legal advice, and not a substitute for a licensed preparer. Payroll tax e-file, 1099 IRS e-file, and sales-tax filing are not live. We draft the journal. You (or your accountant) file.
Confirm gate
Annabelle, Teams, and imports propose. They never write status posted. Bill pay, payroll, tax remit, and cash confirm require a typed or tapped confirm from an accountant or owner. Model-said-yes never releases money.
We never hold your money
There is no payments float and no tax-escrow product. We do not debit your operating account to sit on payroll tax. Unconnected card/ACH stays queued or fails as uncollected — never as a successful charge.
Honest bank and cards
Plaid is not connected. Stripe/ACH is not connected. Mail SMTP is the first rail: queued, or open in your client. A host in SMTP_HOST is configured, not sending. The rec is a CSV walk. Feed status is live, delayed, dropped, or unconnected. A dead feed cannot print a true cash number.
Named hands
Every posting is stamped from the signed-in session. A client cannot name someone else as the actor. Four staff share one house book.
Your book, your export
Journals, invoices, bills, templates, and statements for a house live in this app's database, keyed by house. You can leave with CSV and IIF, and download a full JSON pack of the book plus your account. We do not sell the book.
Sign-in
An email and password on this house, or the deployment platform's own gate signing you in. No Google, Apple, Microsoft or X button is offered and none is wired up. The first person to open a house is owner. Everyone else joins with an invite. Rejoining does not upgrade a clerk. Command Center may embed Bound and open a path or queue a draft. It cannot confirm, post, or move money. SSO is not live — you still sign in here.
Annabelle
Voice and draft assistance. She can fill a template, propose a match, and queue a journal. Spoken post, approve, confirm, or send money is refused. Confirm lives on the queue. Command Center messages of type bound:confirm are ignored.
Terms
Agreement
By creating a house or joining one, you agree to use Stinger Bound as an independent product of Stinger Industries AI (https://stingerindustriesai.com). Command Center is optional. White-label does not transfer the software; it puts your name on the chrome.
Accounts and houses
You are responsible for who you invite and for the role you mint. Owner mints clerk or accountant. Invites cannot mint owner. The house book is shared. Do not share your password. Merge parties when two names are the same customer or vendor — that rewrites open docs onto the kept party.
Your numbers
You (or your accountant) own the accuracy of the books. Drafts are not posted. Posted journals are the P&L. Period lock stops dated posts on or before the lock. Bulk undo voids a bad import you marked.
Leaving
You may export the journal as CSV, the chart as IIF-shaped text, and the full pack as JSON at any time. Switching platforms is onboarding, not hostage.
Liability
Stinger Industries AI is not liable for tax penalties, missed filings, or books you posted without reading the queue. Software is provided as-is. Florida law, excluding conflict rules. Venue: Miami-Dade County.
Privacy
Short version: we hold as little as the house can work with, we do not sell it, there is no analytics or advertising in this app at all, and you can delete the whole account from inside it. The long version is the rest of this page.
What we collect
Your sign-in. There are two doors you can actually walk through, and neither is a social login: this app renders no Google, Apple, Facebook or X sign-in button on any screen.
The exception we will not paper over. No such button exists, but the server side of this app does register two OAuth sign-in providers against the Stinger platform's identity broker at auth.grok.me — one routed to Google, one routed to X — and their callback addresses answer rather than being absent. No screen in this app starts that flow, so nothing here sends you to Google or to X. Were a sign-in ever to complete that way, the broker would return the same kind of identity fields the platform gate does — an id, an email address and a name — and an account would be made from them. We spell this out because it is what the code does, whatever the buttons show.
The first door is an email address and a password you set here. We store a hash of that password and never the password itself.
The second is the Stinger platform this app is deployed on. Reach the app through that platform and its gate hands us a signed token identifying you — an id, your email address, your name, and the team you belong to when there is one — and an account is made from it without your typing anything. Whoever runs that gate therefore knows you opened this app. That is inherent to arriving that way, not something we send them.
Either way we keep an account id, that email address and that name. Every signed-in session records its expiry, the IP address it came from and the browser that made it, so a session can be ended.
The house book. The chart of accounts, parties — your customers and vendors, with whatever contact details you entered for them — invoices, bills, journals, payments, imported bank rows, receipts, templates and statements. Every posting is stamped with the name of whoever made it. The book belongs to the house, not to a person: every member of that house can see all of it.
Your profile. A display name and your role. If you turn on two-factor sign-in, the shared secret behind it is stored on that profile row too.
A count of your reader calls. Each time you have the app read a receipt, a statement or a chart of accounts we increment a per-hour counter against your account id, so one person cannot run the bill up. It holds a number and an hour, nothing about the document.
Who else sees it
xAI. When you photograph a receipt, a bank statement or a chart of accounts for the app to read, that image and a prompt go to xAI's API. This is sharing with a third party and we count it as such — and a bank statement carries your account numbers and everyone you paid, so it is the most sensitive thing this app will ever send anywhere. Nothing goes to xAI unless you upload a page for reading.
Google, for the typefaces. The app loads its fonts from Google Fonts, which means your browser fetches font files from Google on every page and Google sees your IP address and browser when it does. Fetching typefaces is the only thing this app itself sends to Google, and no screen here offers a Google sign-in — see the sign-in section above for the one nuance about the broker.
The app platform. Every page loads one script from grok.com, injected by the platform this app is built and deployed on. Requesting it tells grok.com the visitor's IP address and browser. It is not an analytics tag and we do not send it anything about you or your house.
Stinger's own usage meter. Every time this app gets an answer back from the model, our server sends one accounting row to Stinger's Command Center. That is how we meter our own model spend, and how the fleet of Stinger apps is stopped before it runs past its spending ceiling. The row holds thirteen things and we will name all of them: a format tag, a random one-off id, the time, which app it was (bound), whether it came from the live site or a development build, the provider, the model, a short fixed label naming the feature that spent the money (read_receipt, read_statement or read_chart), four token counts, and our own estimate of what the call cost. That is the entire row. There is no account id in it, no house, no display name, no prompt, no photograph, and no text from the house book — and the code throws rather than send a row that has grown a field it should not have. Those labels are written into the source; nothing you type or photograph can reach one. The row is sent by our server, so your IP address and your device are not in it either. To be plain about what it does record: the ledger learns that a read happened, when, and what it cost. It holds nothing that says by whom. If you run your own copy of this app, leaving STINGER_USAGE_URL unset switches the meter off and nothing else changes; on the hosted app you cannot switch it off.
The people we run on. Our hosting and database providers store the rows above on our behalf, under contract, and use them for nothing else.
That is the whole list. We do not sell the house book. We do not trade it, rent it or hand it to a data broker. We do not train a model on it — Stinger runs no training of any kind.
No analytics, no advertising, no tracking
There is no analytics SDK in this app and no advertising SDK. No pixel, no tag manager, no crash reporter, no attribution kit. We do not build a profile of you, we do not follow you onto other apps or sites, and we have nothing to hand an advertiser. Apple's “data used to track you” is empty for this app, which is why it never asks for tracking permission.
How long we keep it
Posted journals stay while the house exists — a book that quietly forgot a posting would not be a book, and in most places you are required to keep one. Sessions expire on their own. The reader counter rolls off by the hour. Your profile stays until you delete the account. You can take the whole book out as CSV, IIF-shaped text or a JSON pack at any time.
Deleting your account
Sign in, open Account and choose Delete account. It tells you exactly what will go, names the houses, makes you type DELETE, and then removes — in one transaction and permanently:
your sign-in: the email address, the name, and the password hash or platform link behind it;
every session, with the IP address and browser recorded on it;
your profile, including any two-factor secret on it;
your seat in every house, and any invite codes you minted;
every house where you are the only member, in full: the chart of accounts, parties, invoices, bills, journals, payments, bank rows and drafts;
It is one database transaction, so it either all happens or none of it does — there is no half-deleted account. It cannot be undone and there is no grace period.
What it does not reach. A house other people are also in is not destroyed — those records are their business as much as yours, and you simply stop being a member of it. And your name stays on journals, invoices and payments already posted in a house you are leaving. A posted book is an audit trail, and rewriting another business's audit trail to erase a name from it is not something we will do — nor, in most places, something they are allowed to let us do.
One thing that will stop you. If you are the last owner of a house that other people are still in, deletion refuses and says so. A house with no owner is one nobody can ever manage again. Make somebody else an owner and come back; it takes a moment, and nothing is deleted in the meantime.
No account, or cannot get into one? Write privacy@stingerindustriesai.com from the address you signed in with and we will do it for you. That address is also how you ask what we hold about you, or ask us to correct it.
Children
Bound is bookkeeping software for a business. It is not directed to children and an account is not for anyone under 13. We do not knowingly collect anything from a child under 13 — we ask for no age, no school and no family information. If you believe a child under 13 has made an account, write privacy@stingerindustriesai.com and we will delete it and the data on it.
Reaching us
privacy@stingerindustriesai.com, or Stinger Industries AI. If this page changes in a way that matters, the effective date at the top moves.
