Privacy Policy

Account information. Your name, email address, business name and password (stored only as a salted hash, never in readable form).

Business data you enter. The clients, leads, jobs, projects, estimates, invoices, expenses and team records you create. This often includes personal details about your own customers and staff, which you control and we process on your behalf.

Connected account data. If you link QuickBooks, Stripe, Plaid or Gusto, we receive the data those services return — for example invoices, transactions, bank activity or payroll records — along with access tokens needed to keep the connection working.

Technical data. Basic server logs, including IP address, browser type and pages requested, kept for security and troubleshooting.

• To operate the Service and show you your own data.
• To sync with the third-party accounts you have connected.
• To take subscription payments and send invoices you initiate.
• To send service messages such as billing notices and security alerts.
• To investigate abuse, debug faults and keep the Service secure.

We do not sell your data, and we do not share it for third-party advertising.

We use a session cookie to keep you signed in. It is required for the Service to function and is not used for advertising or cross-site tracking.

We share data only with providers that help us run the Service, and only as far as needed: our hosting provider, and the integrations you choose to connect (QuickBooks, Stripe, Plaid, Gusto). Payment card details are handled by Stripe and never stored on our servers. We may also disclose data where legally required.

We keep your data for as long as your account is open. After cancellation we retain it for a limited wind-down period so you can export it, then delete or anonymise it. You can ask us to delete your account data sooner by writing to [CONTACT EMAIL].

Traffic is encrypted in transit over HTTPS, passwords are hashed, and access to production systems is restricted. No online service can promise perfect security, but if a breach affects your data we will notify you promptly.

You can access, correct, export or delete your data. Depending on where you live you may have additional rights — for example under GDPR or the CCPA — including the right to object to certain processing or to lodge a complaint with a regulator. To exercise any of these, contact [CONTACT EMAIL].

The Service is intended for businesses and is not directed at children under 16.

If we make a material change to this policy we will give notice by email or in the app before it takes effect.

Privacy questions can be sent to [CONTACT EMAIL], or to [COMPANY LEGAL NAME] at [COMPANY POSTAL ADDRESS].