Privacy
Updated November 12, 2026
Bezalel is private business management software for a small family of businesses. It's invitation only: only the owners and the people they invite can sign in. This page says what it keeps about the people who sign in, and who else handles the businesses' records.
When you sign in
- Your name and email address, from your invite.
- With a passkey: its public key. Your face or fingerprint never leaves your device.
- With Google: the name, email address, profile picture and account ID Google shares when you agree, and Google's sign-in tokens. They're used only to match you to your invite and sign you in. Bezalel asks Google for nothing else, and never reads your Gmail, Drive, calendar or contacts.
- Each sign-in session: a cookie that keeps you signed in, and the session's IP address and browser. There are no advertising or analytics cookies.
- A phone app, if you connect one: its version, when it last synced and any sync errors.
- What you do in Bezalel, such as adding or changing a record, with your name and the time, so each business has a record of who did what.
The businesses' records
Bezalel holds each business's financial and operating records. Each business's records are kept apart, and only people with access to that business can see them. Records the owners keep for themselves are seen only by the people they choose.
Who else handles them
- A cloud hosting provider runs Bezalel, its database, files and encrypted backups, in the United States, and sends its email.
- A bank connection service connects the bank and card accounts the owners choose to connect, and brings in their transactions.
- An AI service reads receipts and statements, and helps review transactions. Account numbers are shortened and other identifying numbers taken out before a statement is read. Sign-in details aren't sent to it.
- The payment and invoicing services the businesses already use are where their own payment and invoice records come from.
- Google signs you in, if you choose to sign in with Google.
What Google shares when you sign in isn't passed to any of them, except the hosting provider that stores it. Nothing is sold, or shared for advertising.
Bezalel emails you your invite, and the notifications you can turn on or off for each business in Settings.
Keeping it safe
Bezalel is reached only over HTTPS. Its database can't be reached from the internet, backups are encrypted, and which business each person can see is checked on the server for every request.
When access ends
When someone's access ends, they're signed out of every browser and phone and can't sign in again. Their name and email stay in the books' record of who did what. The businesses' records are kept for as long as they're needed for tax and the law.
Questions
To ask what Bezalel keeps about you, or to have your Google sign-in removed, ask the person who invited you. Changes to this page are posted here, with the date above.