Privacy Policy

What we collect

• Account data: name, email, password hash, and company name you provide at sign-up.
• Financial data: transactions, employees, payroll runs, invoices, and tax settings you enter.
• Operational data: server logs, login attempts (for rate limiting), and crash reports if you opt into telemetry.

How we use it

We use your data to operate and improve the service, to authenticate you, and to send transactional emails (verification, password reset, and other essential account communications). We do not sell your data.

Sub-processors

We use a small number of vendors to operate the service: a hosting provider, a database provider, and an email-sending provider. Each processes data only as needed and is bound by their own confidentiality and security obligations.

Retention

We retain your account and financial data for as long as your account is active. You may delete your account at any time by contacting us, after which we will delete or anonymise your data within 30 days, except where retention is required by law.

Cookies

We use a single session cookie to keep you signed in. We do not use third-party tracking or advertising cookies.

Your rights

You can access, correct, export, or delete your data at any time. If you're an EU/UK resident, contact us to exercise GDPR rights.

Contact

Questions about privacy? Contact the address listed in your account.