UK GDPR
Privacy notice
We process your uploaded payments file only to produce your scan and report.
Retention
Uploaded files and the rows read from them are deleted automatically 7 days after upload. Paid reports keep findings and summaries for 12 months, unless you delete them sooner with one click.
Bank details
We store only the last 4 digits of any bank account, plus a salted hash used to detect changes.
AI
Your data is never used to train AI models. Only the minimum needed to write an explanation — rule, masked supplier initials, amounts and dates — is ever sent to a model. Never the full file.
Your rights
You can access, correct or delete your data at any time.
Draft — to be reviewed before launch.