Legal
Privacy Policy
This policy explains what we collect, why we hold it, who can see it and how long we keep it.
1. What we collect
- Account details — name, business name, email address and mobile number, given when you register.
- Business data — the customers, suppliers, invoices, stock, expenses, accounts and documents you enter or upload.
- Billing details — your plan, payment history and invoices. Card details are handled by the payment provider and never reach our servers.
- Usage records — sign-in times, the actions taken in the application, and the device and browser used. These form the audit trail.
2. Why we hold it
To run the service for you, to keep your account secure, to show an accurate audit trail of who did what, to collect subscription fees, and to answer your support requests. We do not sell your data and we do not use it for advertising.
3. Who can see it
Each business’s data is kept separate from every other business. Inside your business, what each user can see is decided by the role and permissions the owner gives them. Our staff access your data only when you ask for support, or where it is strictly necessary to investigate a fault, and that access is logged.
4. Service providers
We rely on a small number of providers to run the service: cloud hosting, an AI provider for the assistant and document reading, a messaging provider for verification codes, and payment providers for subscription fees. Each receives only what it needs to do its part, and each is bound to keep it confidential.
5. Encryption and security
Data is encrypted while it travels to and from the application and while it is stored. Sensitive fields carry an additional layer of encryption. Passwords are stored only as a one-way hash and cannot be read by anyone, including us. Backups are taken regularly and are encrypted in the same way.
6. The AI assistant
When you ask the assistant a question or scan a document, the relevant part of your data is sent to the AI provider to produce an answer. Only the data the asking user is permitted to see is sent. It is used to answer that request and is not used to train any public model.
7. How long we keep it
- While your subscription is active, your data is kept in full.
- If an account is only used for demo access and no plan is taken, the account and its data are removed after the retention period stated in your account, and we email you before that happens.
- After a paid account is closed, the data is kept read-only for a limited period so that you can export it, and is then permanently deleted.
- Records we are required by law to keep, such as billing records, are kept for the period the law requires.
8. Your choices
You can view and correct your details in the application at any time, export your business data, and ask us to delete your account. Where the law requires us to keep certain records, we will tell you which ones and why.
9. Cookies
We use cookies only to keep you signed in and to remember basic preferences such as your selected branch. We do not use advertising or tracking cookies.
10. Children
The service is intended for businesses and is not directed at children.
11. Changes to this policy
If this policy changes in a way that materially affects you, we will tell you in the application and by email before the change takes effect.
12. Contact
Questions about privacy, or a request relating to your data, can be sent to the support address shown in your account.
See also the Terms of Service.