Privacy & Data Handling

This notice explains what data the application holds, where it is stored, and the third parties involved when you use optional features. It applies to the people who use this application to run their business.

What we store, and where

Your business records — invoices, quotes, clients, suppliers, items, expenses, purchase orders, ledger entries and your company settings — are stored in a database on our server. Each account's data is isolated: every request is scoped to your signed-in account, so other accounts cannot see or access your records.

Optional
AI features & Anthropic

The Scan tools (scan an order, a receipt, or a bank statement) and the ✨ Generate tools (draft a quote, items, or a contract) are optional. They are only used when you choose to run them.

When you use one of these tools, the content you provide — the file you upload or the description you type, together with your own company name — is sent to Anthropic (anthropic.com), our AI sub‑processor, to produce the result. Anthropic does not use data submitted through its commercial API to train its models. We do not keep a copy of the AI request or response — only the result you choose to save (for example, the expense details read from a receipt) is stored, in your own account.

If you don't use these features, nothing is sent to Anthropic. Standard use of the app (creating and sending invoices, quotes, etc.) never involves Anthropic.

Files you upload

• Receipts are stored privately, in a folder scoped to your account, and are not publicly reachable on the web.
• Orders and bank statements you scan are processed in memory and not stored — they are discarded once the result is returned.
• A logo you upload is stored with your settings, not as a public file.

Payments

Card payments are processed by Stripe. Card numbers are entered on Stripe's secure pages and are never stored by this application.

Email

When you email an invoice, quote or reminder, it is sent using the mail method you configure in Settings — the built‑in mailer, your own SMTP server, or Microsoft 365. Any SMTP password or API secret you enter is stored on the server only and is never shown back to your browser.

Cookies

We use a single sign‑in cookie to keep you logged in. We don't use advertising or tracking cookies.

Access & deletion

You can export your data at any time from Settings → Backup. To access, correct or delete your account data, contact the business that operates this application.

Last updated 14 June 2026.