Privacy Policy

1. Who we are

Yummy Money provides invoicing and finance admin tools for businesses.

[Insert business name]
[Insert company number if applicable]
Contact: [Insert contact email]

2. What information we collect

• Account details, such as name, email address, business name and login details.
• Xero connection details, such as organisation name and secure access tokens.
• Invoice data imported from Xero, such as invoice numbers, invoice dates, due dates, amounts, payment status, contact names, email addresses, line items and payment links.
• Usage and support data, such as support messages, settings, preferences and basic app activity.
• Billing/subscription data if paid plans are enabled.
• Technical data, such as device/browser information, IP address, logs and security events.

3. How we use the information

We use information to provide the Yummy Money service, connect securely with Xero, display and manage invoices, prepare payment reminders and invoice communications, help keep invoice data up to date, improve reliability, security and support, manage subscriptions where relevant, and meet legal, accounting or security obligations.

4. Lawful basis

Under UK GDPR, our lawful basis may include contract where processing is needed to provide the service, legitimate interests to keep the service secure and support users, legal obligation where records or lawful requests must be handled, and consent where optional marketing or optional features require it.

5. Xero data and integrations

Users choose to connect their Xero account. Yummy Money only accesses Xero data needed to provide the service. Users can disconnect Xero from inside the app. Disconnecting Xero may stop new syncing. Some records may still be retained where needed for account history, support, legal, security, billing, accounting or backup reasons.

6. Customer invoice data

Business users may import invoice/contact data relating to their own customers or clients. Users are responsible for making sure they have the right to use that data with Yummy Money. Yummy Money handles that data only to provide the service.

7. AI features

AI-assisted features may help with invoicing, payment reminders and admin tasks. We do not sell customer data. Some AI-assisted features may be added in future. If we introduce these features, we will explain how they work and update this policy before using customer data in new ways.

8. Who we share data with

We may share data with trusted service providers needed to run the product, such as hosting/database providers, authentication providers, payment providers, Xero, email delivery providers, and analytics or error monitoring tools if used. We do not sell personal data.

9. How long we keep data

We keep personal data only for as long as needed to provide the service, meet legal obligations, resolve disputes, maintain security, and keep reliable business records. Users can request deletion, although some data may need to be retained for legal, billing, security, backup or accounting reasons.

10. Security

We use reasonable technical and organisational measures to protect data. Xero access tokens should be stored securely, and access is limited to people and systems that need it. No online system is 100% risk-free.

11. User rights

• Access the personal data we hold.
• Correct inaccurate data.
• Request deletion.
• Restrict or object to some processing.
• Request a copy of data.
• Withdraw consent where processing is based on consent.
• Complain to the ICO.

12. Contact

For privacy questions or data requests, contact us at: [insert contact email]. You can also complain to the UK Information Commissioner's Office.

13. Updates to this policy

We may update this policy as Yummy Money develops. The latest version will always be shown on this page.