Privacy policy

1. The short version

Your business records — invoices, customers, stock and ledgers — are stored on your own computer. We do not hold a copy and cannot read them.

What we do hold is the account information needed to sell and support the software: your email address, name, business name, phone number, country, licence details and the computers you have activated.

2. What we collect

Account details you give us: email address, full name, business name, phone number and country.

Licence and device records: your licence key, plan, activation and expiry dates, and for each activated computer a hashed device fingerprint, device name, operating system, application version, last validation time and IP address.

Security records: one-time code requests, login attempts, IP addresses and browser identification, kept to detect abuse.

Support correspondence: the messages you send us and our replies.

3. What we deliberately do not collect

We do not receive your invoices, customer lists, stock levels, prices or financial totals. The software does not transmit them.

We never store the six-digit codes we email you. Only a one-way hash is kept, so a breach of our systems cannot produce a working code.

We do not store raw hardware serial numbers. Device identification uses a one-way hash, so we cannot reconstruct details about your computer.

We never see or store card details. Payments are handled by the payment provider.

4. Why we hold it

To create and maintain your account and issue your licence.

To verify activations and enforce the device limit of your plan.

To send transactional email: codes, licence certificates, expiry reminders and receipts.

To answer support requests and to detect fraud and licence abuse.

We do not sell your information and we do not share it for advertising.

5. How long we keep it

Account and licence records are kept while your account is open and for seven years afterwards where tax law requires it.

One-time code records are deleted after 30 days. Security logs are kept for 12 months.

Support messages are kept for two years.

6. Your rights

You may ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete your account.

Deleting your account removes your personal details from our systems. It does not touch the business records on your own computer — only you can remove those.

To make a request, contact us using the details on the contact page.

7. Security

Data in transit is protected with HTTPS. Data at rest is encrypted and backed up, and backups are stored separately from the live system.

Access to customer records is limited to staff who need it for support, and every administrative action is logged.

8. Changes

If we change this policy in a way that affects you, we will email you before it takes effect.