Privacy

What we store

When you sign in with Google we receive and store:

• Your Google account identifier, which is how we recognise you on your next visit
• Your email address, name and profile picture URL

We identify you by the Google account identifier rather than by your email address. That is deliberate: email addresses get reassigned, and keying on one would eventually hand your history to whoever inherits your address.

Everything else is what you enter — your business details, customers, catalog items and documents.

Where it lives

On Cloudflare's network. Each organisation's business data is held in its own separate database rather than in shared tables filtered by an organisation id — there is no query that can reach another organisation's data, because that data is somewhere else.

Cookies

One cookie, holding a session identifier and nothing else. It is HttpOnly, so scripts cannot read it, and SameSite=Lax, so it is not sent on cross-site requests. There are no advertising or analytics cookies, and no third-party trackers.

What we do not do

• We do not sell or share your data with anyone
• We do not use your business data to train anything
• We do not send marketing email you did not ask for
• We do not read your documents except when you ask us to help with one

Sign-out

Signing out deletes the session record on the server, not merely the cookie in your browser — so it stops working everywhere rather than only where you clicked.

Deletion

Ask, from the contact page, and we will delete your account and every organisation you own. Where you are a member of an organisation someone else owns, we remove you from it and leave their records intact — their invoices are their statutory records, not yours to delete.

Retention

Contact form messages are kept until answered and then for a year. Sessions expire after 30 days of inactivity. Your business data is kept for as long as your account exists.

Contact

Questions about any of this go to the contact page, with "Privacy and data" as the topic.