Privacy notice
This notice is a working draft describing how the product handles data today. Have it reviewed by your legal adviser before publishing it as your own notice.
Data about your team
When you create an account we hold your name, email address, the companies you belong to and your role in each. We record sign-in activity and the actions you take in the product so that financial and administrative changes can be traced to a person.
Data about your customers
You decide what customer data enters the product — typically business contact details, invoices, balances and payment history. That data belongs to your company workspace and is not readable from any other workspace. We process it on your instructions to provide the service.
Who can see it
People you have invited to your company workspace, limited by the role you gave them. Our own staff access production data only where necessary to operate or support the service, and such access is recorded.
Automated assistance
The product can draft communications and prioritise balances. Those drafts are generated from your own records and are reviewed by a person before use. Decisions with financial consequence are not made automatically.
Retention
Operational records are kept while your account is active. Audit records of financial and administrative actions are retained longer because their purpose is to evidence what happened. You can request export or deletion of your workspace data.
Security
Access is enforced in the database and on the server, credentials for external services are held in server-side secret storage, and payment events are verified with the payment provider rather than trusted from a browser.
Contact
To ask about your data, contact the person who administers your company workspace, or reach us at the address published with your subscription. Add your real contact address here before you publish this notice.