Privacy Policy

Last Updated: January 22, 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Username and password (encrypted)
• Email address (if provided)
• Company name and registration details

1.2 Financial Data

To provide accounting and VAT services, we process:

• Transaction records and journal entries
• Account balances and financial statements
• VAT calculations and submissions
• HMRC VAT Registration Number (VRN)

1.3 HMRC Integration Data

When you authorize our system to submit VAT returns to HMRC:

• We receive an authorization token from HMRC (stored securely)
• We submit VAT return data on your behalf
• We store submission confirmation receipts
• No Government Gateway credentials are stored by our system

2. How We Use Your Information

We use your personal and financial data to:

• Provide accounting services: Maintain your accounts, generate reports, and prepare financial statements
• Submit VAT returns: Calculate and submit VAT returns to HMRC on your behalf
• Compliance: Help you meet your legal obligations to HMRC
• System security: Protect your account from unauthorized access
• Service improvement: Improve and optimize our service

3. Data Sharing and Disclosure

3.1 HMRC

We share VAT return data with HM Revenue & Customs when you authorize us to submit returns on your behalf. This is done through HMRC's official Making Tax Digital (MTD) API.

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

3.3 Third Parties

We do not sell, trade, or rent your personal information to third parties. We do not share your data with third-party marketing companies.

4. Data Storage and Security

4.1 Storage

Your data is stored on secure servers located in sxb1plzcpnl508662.prod.sxb1.secureserver.net. We implement appropriate technical and organizational measures to protect your data.

4.2 Security Measures

• Passwords are encrypted using industry-standard hashing
• HMRC OAuth tokens are stored securely in the database
• Database connections use secure credentials
• User authentication required for all account access
• Multi-user data isolation (users can only access their own data)

4.3 Data Retention

We retain your financial data for a minimum of 6 years in accordance with UK tax law requirements. HMRC authorization tokens are retained until you revoke access or delete your account.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data

To exercise these rights, please contact us using the details below.

6. HMRC Authorization

When you authorize our application to submit VAT returns to HMRC:

• You authenticate directly with HMRC using your Government Gateway credentials
• We never see or store your Government Gateway password
• HMRC provides us with a secure access token to act on your behalf
• You can revoke this authorization at any time through your HMRC online account
• The authorization is specifically limited to VAT submission only

7. Cookies and Tracking

Our system uses session cookies to:

• Maintain your login session
• Remember your preferences
• Ensure security of your account

These cookies are essential for the service to function. We do not use third-party tracking or advertising cookies.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last Updated" date at the top of this page.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

11. Data Protection Officer

For data protection inquiries, you can also contact our Data Protection Officer at:
Email: Support Email

12. Supervisory Authority

You have the right to lodge a complaint with the UK's supervisory authority: