Privacy Policy

We collect information you provide when you create an account, sign in, manage projects, invite team members, upload records, subscribe, or contact us. This may include your name, email address, profile details, team and project information, uploaded documents, payment status, and usage records.

If you connect Xero, we may receive accounting information that you authorise through Xero, such as organisation details, invoices, bills, contacts, accounts, transactions, bank feed records, attachments, tax rates, and related bookkeeping data.

We use information to provide and improve the Service R&D workspace, authenticate users, manage teams and invitations, process payments, maintain project records, support R&D documentation workflows, and help with bookkeeping and accounting tasks that you request.

Xero data is used only to operate the accounting, reconciliation, reporting, evidence capture, and bookkeeping features connected to your account or organisation.

When you connect Xero, we use OAuth access granted by you. You can disconnect access through your Xero account or by contacting us.

We do not sell Xero data. We do not use Xero data for advertising. We only access Xero data required to provide the bookkeeping, reporting, automation, or compliance-support features you choose to use.

Xero tokens are stored encrypted. Access is limited to systems and personnel who need it to operate, secure, support, or troubleshoot the service.

We may share information with service providers that help us run the platform, including hosting, database, analytics, authentication, payment, email, and accounting integration providers.

We may also disclose information where required by law, to enforce our rights, to prevent fraud or security issues, or with your consent.

We use reasonable technical and organisational safeguards to protect information, including access controls, encrypted connections where supported, and encrypted storage for sensitive integration tokens.

No online service can guarantee absolute security. You should keep your login credentials secure and tell us promptly if you believe your account has been accessed without permission.

We keep information for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, maintain audit records, and enforce agreements.

If you disconnect Xero or close your account, we will delete or de-identify connected data where reasonably possible, subject to legal, tax, accounting, backup, audit, and security requirements.

You may request access to, correction of, or deletion of your personal information. Some records may need to be retained where required for compliance, accounting, legal, security, or audit purposes.

You can limit the information shared with us by choosing what you enter into the platform and by managing connected app permissions through Xero.

We may use service providers or infrastructure located outside Australia. Where information is processed overseas, we take reasonable steps to protect it in line with this policy.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.