Privacy policy

The short version

• We only read your Xero data, never change it, and only to prepare your Tier 4 performance report.
• We don't sell your information, use it for advertising, or use it to train AI models.
• Your Xero connection is encrypted. You can disconnect at any time, and we disconnect automatically after you download your final report or after 3 days without use.
• Card payments are handled by Stripe. We never see or store your card number.

What we collect

When you sign in with Xero

Your name, email address and Xero user ID, which Xero shares with us when you sign in.

From your organisation's Xero file (read-only)

With your permission, we read your organisation's settings, chart of accounts, Bank Summary report, bank transactions, payments, invoices, bills and credit notes. These can include the names of people and businesses your organisation has dealt with. We read this data when you use the service and keep it in server memory for up to 10 minutes so pages load quickly. We do not save copies of your transactions.

What you enter

Your organisation's details, account mapping choices, adjustments, last year's figures, and the other information the report needs, such as main activities, assets and liabilities, related party transactions, and the names and positions of the people approving the report. Please only enter other people's details if you are authorised to do so for the report.

Payments

A record of each payment: the organisation, financial year, price and payment status. Card details are entered on Stripe's secure page and handled by Stripe under its own privacy policy.

Cookies

We use one essential cookie to keep you signed in, and a short-lived cookie during Xero sign-in for security. We don't use analytics or advertising cookies.

How we use it

• To sign you in and connect to the Xero organisations you choose.
• To calculate your cash statement and prepare your performance report.
• To remember your choices so next year's report is quicker.
• To take payment and keep the business records we are required to keep.
• To respond to your questions and tell you about important changes to the service.

We won't send you marketing emails unless you ask us to.

Who we share it with

We don't sell or rent personal information. We use these service providers to run the service:

• Amazon Web Services (hosting, Sydney region, Australia)
• Neon (database, AWS Sydney region, Australia)
• Stripe (payments)
• Xero (sign-in and the data you choose to connect)

These providers store or process information on our behalf and under our instructions. Some are based, or store information, outside New Zealand. We choose providers that protect information with safeguards comparable to the Privacy Act. We will only disclose information to anyone else if you agree, or if the law requires or allows it.

How we protect it

• We only ask Xero for read-only access.
• Xero access tokens are encrypted (AES-256-GCM) before they are stored, and deleted when you disconnect.
• All traffic uses HTTPS. Sign-in sessions are stored as one-way hashes.
• Generated reports are created when you download them and are not stored on our servers.

If a privacy breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected, as the Privacy Act requires.

How long we keep it

• Xero tokens: until the organisation is disconnected. This happens when you disconnect it, when you download the final report, or after 3 days without use, whichever comes first.
• Your report choices and entries: while you use the service, so you can reuse them next year. Ask us and we will delete them.
• Payment records: 7 years, as required for tax records.

Your rights

You can ask to see the personal information we hold about you and ask us to correct it. Email tinloy.w@gmail.com. We will respond within 20 working days.

If you are not happy with how we have handled your information, please contact us first. You can also complain to the Office of the Privacy Commissioner.

Changes to this policy

We will update this page if we change how we handle personal information, and tell signed-in users about significant changes.

Contact

Privacy officer: Tinloy Wen, tinloy.w@gmail.com