How we handle your data
Exactly where your numbers go, what the AI sees, and what it cannot do. Every claim here can be checked against how the software actually works.
Last updated 5 September 2026
Do you connect to my QuickBooks?
No. You export a file and send us that. You can open it first, read it, delete a column you would rather not share, and change your mind. We never hold a key to your accounting system, so there is nothing standing open between us and your books.
Can other customers see my data?
No. Each customer's data sits in its own separate storage area. There is no shared table of everyone's ledgers, so there is no query anyone could write — including us — that returns one customer's figures to another.
What does the AI actually see?
Two things, both marked on the diagram, and nothing else.
Your question. The words you type, so it can work out what you are asking for — which part of your books, over what period, broken down which way. It sees no figures at this step.
The totals. Once our code has done the arithmetic in your own storage, the finished totals are sent to be written into a sentence. A real example, in full:
Your individual transactions are never sent, because they are never fetched. Every lookup adds up before it returns, so by the time anything exists to send, it is already a total.
The most identifying thing that can appear is a supplier's name next to a total — if you ask "what do we spend by vendor?". Here is the complete list of what a total can be labelled with. There is nothing else, because our code will not group by anything else:
| A total can be labelled by | It can never be labelled by |
|---|---|
| category · classification (cost of sales / running cost / capital) | an invoice or transaction |
| vendor · department · cost centre | a customer of yours |
| month | a person, name, or email address |
| cloud provider · service · SKU | a memo, description, or note |
Can the AI change or delete anything?
No. It has no ability to write, move, or delete. It reads and it answers. That is not a setting we chose — the AI is never given anything to write with.
Can it make a number up?
No, and this is checked rather than promised. After the AI writes its sentence, we read it back and compare every figure in it against what we calculated. If anything does not match, the whole sentence is thrown away and you get our own plainly-written version instead. A made-up number cannot reach you, because it does not survive the check.
The same principle runs through the product: the number is calculated, not generated. If we cannot back a figure with the rows behind it, we say so rather than estimate.
Is my data used to train AI models?
No. We do not send your data to an AI company to train their models, and we do not train models on your books.
Separately, and only if you choose to take part, we may include your business in anonymous industry comparisons — so you can see how your costs compare to similar businesses. That shares a percentage, never an amount ("personnel is 50% of income"), and a figure is only ever published once at least five different businesses have contributed to it, with a small amount of statistical noise added so no single business can be worked backwards out of the result. It is off unless you turn it on, and you can turn it off again.
Who else touches my data?
The companies we rely on to run the service. This is the complete list:
| Company | What for | What they hold |
|---|---|---|
| Anthropic | the AI that reads your question and writes the sentence | your question, and finished totals |
| Railway | hosting and the main database | your workspace and its data |
| Databricks | storage for cloud-bill data, if you use that part | your cloud cost records |
| Resend | sending you email — invitations and reminders | your email address |
Each is a well-established provider under its own data-protection terms. If that list ever changes, we will say so here.
How long do you keep it?
While your workspace is open, and for 30 days after you close it. That window is deliberate: it is long enough that changing your mind is easy, and short enough that we are not sitting on your books indefinitely. After 30 days it is deleted. You can export your data at any time, and ask us to delete it sooner.
The short version
- We never connect to your accounting system. You send a file you chose.
- Your transactions never leave your storage. Only finished totals do.
- The AI reads your question and writes a sentence. It cannot calculate, change, or delete.
- It cannot invent a figure — we check its work and throw out anything we did not calculate.
- Nobody else's data is mixed with yours, and yours is not mixed with anyone else's.
Something we do not claim
We do not hold SOC 2, ISO 27001, or any other security certification, and we will not imply that we do. We are early. What we can tell you is exactly how the software works, which is what this page is for — and every statement on it can be checked against what the product actually does.