Privacy Policy
Last updated: 2 November 2026
1. Two kinds of data
About you as our customer: the account owner's and users' names, email addresses, company details and billing information. For this we are the data controller.
Data your company puts into the Service: your customers, suppliers, employees, invoices and so on. Your company decides what goes in and is the controller; we process it only on your behalf and only to run the Service.
2. What we collect
- Account details: name, email, password (stored only as a secure hash), company name, country, currency and time zone.
- Billing: plan, add-ons and payment history. Card details are handled by Stripe; we never see or store full card numbers.
- Technical: IP address, browser and error logs, kept for security and to fix problems.
- Messages sent through company websites and online shops, which belong to that company.
3. How we use it
- To provide, secure and support the Service.
- To bill you and send account emails (sign-up confirmation, password resets, invoices and important notices).
- We don't sell personal data and don't use your company's data for advertising.
4. Who we share it with
Only the providers we need to run the Service: our hosting provider (servers and backups), Stripe (payments) and our email provider (sending emails). They may only use the data to provide their service to us. We may disclose data if the law requires it.
5. Security and retention
- Connections are encrypted (HTTPS), each company's data is kept separate, staff access is limited, and the database is backed up every night. Backups are kept for 14 days.
- We keep account data while your account is open and for 90 days after it closes, then delete it, except records we must keep by law (for example our own invoices to you).
6. Cookies
We use only the cookies needed to keep you logged in and to protect forms. We don't use advertising or tracking cookies.
7. Your rights
You can see and correct your details in the app, and export your company's data. To ask for a copy of your personal data, or for deletion, contact us. Depending on where you live you may also complain to your data protection authority. If your data is in a company's account (for example you are one of their customers or employees), please contact that company first.