Privacy policy
Last updated: 4 September 2026
What we collect
- Account — your Google account email address and name, used to sign you in and to identify what belongs to you.
- Company information — the registered details, bank account names and numbers, and reminder settings you enter or that are read from documents you upload.
- Documents and books — the certificates, invoices, receipts, bank statements and financial statements you upload or import, and the records created from them.
- Connected services — if you connect Google Drive we store an access token limited to files you pick; if you connect Stripe we store the read-only restricted key you paste. Both are encrypted at rest.
How documents are processed
Uploaded documents are read by optical character recognition and language models to pre-fill fields (currently Zhipu AI, with OpenAI as a fallback). The document content is sent to those providers for processing. Extraction inputs and outputs are retained by us to evaluate and improve accuracy.
What we never do
- We do not sell your data or use it for advertising.
- We do not share your books with anyone except the auditor links you create yourself, which are read-only and expire after 90 days (you can revoke them at any time).
- We only ever read from Stripe and Google Drive, never write.
Storage and security
Data is stored on our own infrastructure. Connections are encrypted in transit; third-party credentials (Stripe keys, Google Drive tokens) are encrypted at rest. File access requires your sign-in or a valid auditor link.
Deletion
You can delete individual records, statements, companies (which removes their reminders) and auditor links in the app. To delete your account and everything in it, email us.