Last updated: 13 October 2026
This notice explains what happens to your data when you connect Snapbooks to an AI assistant, for example through the Snapbooks connector or plugin in Claude, ChatGPT or Grok, or any other assistant that uses the Snapbooks MCP server at https://api.snapbooks.com/mcp. It adds to our general privacy policy (in Norwegian), which applies to everything else.
Contents
- Who is responsible
- What the connector can access
- What the AI assistant provider receives
- What Snapbooks receives and stores
- Changes to your books
- Access tokens and how to disconnect
- Retention
- Legal basis
- Your rights and contact
Who is responsible
Snapbooks AS (org. no. 921605900)
Christian Michelsensgate 4
5012 Bergen, Norway
Email: hei@snapbooks.no
Snapbooks AS is the controller for the personal data it processes to provide the connector. For the accounting data in your books, the company you keep books for is the controller and Snapbooks is its processor under our data processing agreement.
The provider of the AI assistant you use (for example Anthropic for Claude, OpenAI for ChatGPT or xAI for Grok) is not our processor. You use their service under your own agreement with them, and they are responsible for how they process your conversations.
What the connector can access
You connect by signing in with your Snapbooks user and approving access. The connector can then reach only the companies (client accounts) your Snapbooks user can access, with the same permissions as in the Snapbooks app. If you untick write access when you connect, the assistant can only read.
Depending on what you ask, the assistant can retrieve:
- your name, email address and the companies you can access;
- accounting records: journal entries, accounts, VAT codes, balances, period locks and reporting deadlines;
- documents such as supplier invoices, receipts, sales invoices and statements, including their text;
- bank transactions and payment requests;
- customers, suppliers and products;
- payroll data: employees, employment contracts, tax card details, payroll runs and payslip lines;
- the accountant’s open questions, and Snapbooks help articles.
National identity numbers (fødselsnummer and D-numbers) are never returned to the assistant, and the connector does not accept them.
What the AI assistant provider receives
The assistant decides which tools to call based on your conversation. The data a tool returns is sent to the assistant and becomes part of your conversation with it. The provider processes it under your agreement with them and their privacy policy, and it may be stored with your conversation history according to your settings there.
Only connect accounts you are allowed to share with your AI assistant, and check whether your organization permits it.
What Snapbooks receives and stores
Snapbooks does not receive your conversation, your chat history or anything else from the assistant beyond the tool calls it makes. For each tool call we receive the tool name and the arguments the assistant chose, for example a search term, a date range or the lines of a journal entry. We use them only to answer that call.
We keep:
- Technical logs for security, troubleshooting and abuse prevention: time, IP address, the AI assistant (OAuth client), your user, the tool called and whether it succeeded. Error reports for a failed call may contain parts of that call.
- Audit records of changes you approve, as for any change in Snapbooks.
- Approval cards: a prepared change waiting for your approval is kept for up to 30 minutes, then discarded.
- Connection records: the AI assistant’s registration (its name and redirect addresses) and your access and refresh tokens, stored as hashes where the token itself is not needed.
We do not sell the content of connector calls or use it for advertising. Changes you approve become part of your books, and the accounting data in your books is processed as described in our data processing agreement.
Changes to your books
Nothing an assistant prepares (a journal entry, an invoice, a customer, a payroll change) is saved or sent until you approve it:
- In an assistant that shows Snapbooks approval cards, you see exactly what will happen and press Approve on the card. Only then is the change made, including anything it sends outside Snapbooks, such as an invoice, an email, payslips or an a-melding.
- In other assistants the action is only a preview, and you complete it in the Snapbooks app.
If you connected with read access only, the assistant cannot prepare changes at all. The connector never sends payments or moves money.
Access tokens and how to disconnect
Access uses OAuth 2.1. Access tokens expire after one hour and are refreshed automatically while you stay connected. You can end access at any time:
- in the assistant, by disconnecting or removing the Snapbooks connector or plugin; and
- in the Snapbooks app, under API access in your profile menu, which revokes the assistant’s tokens.
Retention
- Technical logs: normally up to 90 days.
- Approval cards: up to 30 minutes.
- Refresh tokens: until they expire, are revoked, or you disconnect.
- Accounting data: as described in our general privacy policy and as the Norwegian Bookkeeping Act requires.
Legal basis
We process your user data to provide the service you have asked for (GDPR Art. 6(1)(b)) and keep logs for security and abuse prevention based on our legitimate interest (Art. 6(1)(f)). Accounting data is processed on behalf of the company you keep books for, under our data processing agreement.
Your rights and contact
You have the rights described in our general privacy policy: access, rectification, erasure, restriction, portability and objection, and the right to complain to the Norwegian Data Protection Authority (Datatilsynet). To exercise them, or for any question about this notice, email personvern@snapbooks.no or hei@snapbooks.no.
We may update this notice when the connector changes. The date at the top shows the latest version.