NavSuccess is the trade name of Bashir CPA Inc., a certified public accounting firm in New Hope, Minnesota (“NavSuccess,” “we,” “us”). This policy explains what information we collect through our website and in providing accounting, bookkeeping, tax, payroll, and advisory services, how we use and protect it, and the choices you have. As CPAs we are also bound by professional confidentiality standards and by federal law governing tax return information, which this policy supports rather than replaces.
Information we collect
- Information you send us. Your name, business name, email, phone number, and message when you use our contact or referral forms, book a consultation, or email us.
- Client records. To provide our services, clients share financial and tax information such as bank and credit card statements, transaction details, invoices, payroll data, financial statements, tax documents, and the taxpayer identification numbers needed to prepare filings.
- Connected bank account data. With a client’s permission, we connect to their bank and credit card accounts to receive read-only transaction history and account balances. The connection is made through our financial-data provider, Stripe, Inc. (Stripe Financial Connections). The client signs in to their bank on a secure page; we never see or store bank login credentials or full account numbers, and the connection cannot be used to move money.
- Payment information. When clients pay us by bank transfer (ACH), the bank details are collected and held by Stripe. We keep only a masked account reference (such as the last four digits) and the payment authorization.
- Health information. Some of our clients are healthcare providers. Where a client gives us access to protected health information, we handle it under a Business Associate Agreement and the HIPAA rules, and we collect only the minimum needed (for example, an account or claim number rather than a patient’s name).
- Website usage. Our website uses Google Analytics to understand how visitors use the site (pages viewed, approximate location, device type). It does not identify you personally.
How we use information
- To provide the services a client engages us for: keeping the books, categorizing and reconciling transactions, preparing financial statements, payroll, and tax filings, and advising on the business.
- To communicate with you, schedule meetings, and answer inquiries.
- To bill for our services and collect payment.
- To meet our legal, regulatory, and professional obligations, including record-keeping requirements.
- To keep our systems secure and improve our website.
Connected bank account data is used only to provide accounting services to the client it belongs to. We do not use it for marketing, credit decisions, or any other purpose.
How we share information
We do not sell personal or client information, and we do not share it for advertising. We share information only:
- With service providers that help us run our firm under confidentiality obligations — for example cloud hosting (Amazon Web Services, in the United States), bank connections and payments (Stripe), email delivery, and productivity and accounting software a client uses with us.
- With tax authorities and government agencies when we file returns or reports at a client’s direction.
- With others a client asks us to share with, such as their lender, attorney, or another advisor.
- When required by law, subpoena, or professional regulation, or to protect the rights and safety of our clients and our firm.
We use or disclose tax return information only as permitted by Internal Revenue Code §7216 and its regulations, which generally require the client’s written consent for any use beyond preparing their return.
How we protect information
Client data is stored in the United States and encrypted in transit and at rest. Access is limited to the NavSuccess team members who need it to serve the client, protected by strong authentication, and logged. Our providers are selected for their security practices, and we review access when team members change roles.
Bank connections: your control
A client may disconnect a linked bank account at any time by contacting us; we will stop receiving new data from that account right away. Disconnecting does not delete transactions already recorded in the client’s books, which we keep as part of their accounting records unless the client asks otherwise and the law allows.
How long we keep information
We keep client records for as long as we provide services and afterwards for the period professional standards and law require (generally at least seven years for tax and accounting workpapers). Website inquiries that do not become client engagements are kept only as long as needed to respond and follow up.
Your choices
You can ask to see, correct, or delete personal information we hold about you, or ask us to stop contacting you, by emailing hello@navsuccess.com. Some records must be retained for legal or professional reasons; if so, we will tell you. Clients receive copies of their own records on request.
Children
Our website and services are for businesses and adults. We do not knowingly collect information from children under 13.
Changes to this policy
We may update this policy as our services or the law change. We will post the updated version here with a new effective date, and notify clients of material changes.
Contact us
Bashir CPA Inc. (NavSuccess)
4124 Quebec Ave N, Suite 307, New Hope, MN 55427
hello@navsuccess.com