Privacy

Your account. Name and email address, handled by our sign-in provider Clerk. Your password never reaches this app — Clerk holds it, and we only ever see an identifier for you.

Your business records. Everything you enter or import: your chart of accounts, invoices, bills, quotes, credit notes, journals, fixed assets, GST returns and the reports built from them.

Your contacts.The names, email addresses, postal addresses, phone numbers and GST numbers of the customers and suppliers you add. This is other people's personal information, and you are responsible for having a reason to hold it.

Bank transactions. Either imported by you from a CSV file, or fetched from your bank through Akahu if you connect a feed. Dates, amounts, payees and descriptions — the same information that appears on your bank statement.

A record of what happened. An audit log of significant actions, and a log of errors so faults can be fixed. Error reports are scrubbed of passwords, tokens and connection strings before being stored.

Bank connections are handled by Akahu, a New Zealand open-banking provider. Connecting a feed is read-only: the app can see accounts and transactions, and cannot move money. There is no payment capability in this software at all.

Your bank login is never entered into this app and is never seen by it. The access token Akahu issues is stored encrypted (AES-256-GCM). If access is revoked at Akahu's end, the token is deleted here and the app tells you the feed has stopped.

You can disconnect a feed at any time from the Banking screen. Disconnecting stops new transactions arriving and keeps the ones already imported, because they are part of your books.

The database is hosted by Supabase and is currently located in Seoul, South Korea. The application runs on Vercel. Sign-in is handled by Clerk. All three are outside New Zealand, which means your information — and your contacts' information — is stored and processed overseas.

We are telling you this because you are entitled to know before you decide to use the app, not because it is buried in a schedule somewhere.

Running the app for you: doing your bookkeeping, producing your reports, and sending the documents you ask to be sent.

It is not sold, rented, or shared with advertisers. There is no advertising and no third-party analytics or tracking in this app. Nobody is profiled.

Because this is early testing, the developer may look at your data to diagnose a fault or understand a bug you report. If you would rather that did not happen, please say so — and please do not put anything in here you would not want a person to see while fixing something.

Your records are exportable at any time, by you, without asking. Reports export to Excel and PDF, and the year-end pack produces your profit & loss, balance sheet, general ledger and workpapers in one download.

Do that before you leave. Nobody keeps a copy for you.

An owner can permanently delete a business from Settings → Close this business. That removes the organisation and everything in it — invoices, bills, transactions, journals, reports, contacts and attachments — and destroys any stored bank token at the same time.

It cannot be undone and there is no copy to restore from afterwards, which is why the app makes you type the business name to confirm.

Backups taken before a deletion may persist for a short period as part of ordinary backup rotation, and are deleted as those backups age out.

Traffic is encrypted in transit. Bank tokens are encrypted at rest. Every database table has row-level security enabled, and each organisation's data is scoped to that organisation on every query.

Invoice links you share with a customer use an unguessable token, are excluded from search engines, and can be revoked by you at any time — which immediately stops any copy of the link already sent.

No system is perfectly secure, and this one is maintained by one person. If you find a problem, please report it rather than exploiting it, and it will be taken seriously.

Under the Privacy Act 2020 you can ask what personal information is held about you, ask for it to be corrected, and complain if you are unhappy with how it has been handled. Most of it you can see and change yourself in the app; for anything else, get in touch.

If a complaint is not resolved to your satisfaction, you can raise it with the Office of the Privacy Commissioner.

If information is lost or exposed in a way that could cause you serious harm, you will be told, and so will the Office of the Privacy Commissioner, as the Privacy Act requires. You will not find out about it from someone else.

This page is reviewed when the app changes in a way that affects it — for example, if the database moves to a different country. The review date is at the top.

Questions, corrections, or a request to delete something: [TODO: contact email]

Accounting Buddy is operated by [TODO: your name or company, and NZBN if you have one], New Zealand.