Privacy Policy
Provider: Accusolve Accountants Limited, company number 16705058, registered office 38B Monahan Avenue, Purley, CR8 3BA.
Accusolve Invoicing processes account, company, customer, supplier, invoice, purchase, VAT, audit, log and technical data to provide bookkeeping, invoicing, VAT, support and security functions.
Accusolve Invoicing may act as controller for account, platform, security, support and admin data. Accusolve Invoicing may act as processor for bookkeeping, customer, supplier, invoice and VAT data entered by business users, processing that data on customer instructions.
Stripe handles subscription payments, while our email provider delivers application messages. We share only the data needed for those services; see Subprocessors for details.
Logs may include IP address, user-agent, audit data and security information. Data is retained where needed for legal, tax, accounting, security and audit purposes.
Users and customers can request access, correction, export, closure or deletion by emailing mail@accusolveaccountants.com. Deletion may be limited where VAT, accounting, security, audit or legal records must be retained.
You have the right to complain to the Information Commissioner's Office if you are unhappy with how we handle your personal data. We encourage you to contact us first so we can try to resolve your concern.
Lawful basis by purpose
| Processing purpose | Data involved | Lawful basis |
|---|---|---|
| User account creation/admin-created access | Name, email, role, company access | Contract / legitimate interests |
| Login, MFA and session security | Account ID, cookies, IP, user-agent, MFA status | Contract / legitimate interests |
| Company profile and VAT setup | Business name, address, VRN, settings | Contract / legal obligation |
| Customer/client records | Names, emails, addresses, invoice contact details | Contract; processor processing on customer instructions |
| Supplier records | Names, emails, addresses, supplier details | Contract; processor processing on customer instructions |
| Invoices, credit/debit notes and bookkeeping records | Invoice/customer/supplier/VAT data | Contract / legal obligation |
| Audit logs and security logs | User ID, company ID, IP, user-agent, action history | Legitimate interests / legal obligation |
| Support emails and admin support | Contact details, support content | Contract / legitimate interests |
| Strictly necessary cookies | Auth, session, MFA, anti-forgery, company context | Contract / legitimate interests; PECR strictly necessary exemption where applicable |
| Marketing | Not currently used | Not applicable unless added later |
Related evidence
Strictly necessary cookies are used for login, MFA, anti-forgery, session/company context. See the Cookie Policy and cookie inventory for current details.
Additional evidence is available on the encryption and data security, data export and closure and subprocessors pages.
Registration verification
During registration we temporarily hold your name, email, business name, a password hash, a hashed verification token and a keyed network-address reference used to limit abuse. Verification links expire after one hour. Pending registration details are removed when your account is created; otherwise they are eligible for removal after 24 hours by our daily cleanup process. We do not store your plaintext password. Verification pages do not load optional analytics.
Stripe billing and account closure
Stripe processes subscription payments and holds card/payment credentials. We retain billing identifiers, subscription status, entitlement dates and a limited billing/deletion audit; we do not store raw card numbers or security codes. Stripe-hosted billing pages provide payment-method management, invoices and receipts. Stripe's own privacy information describes its processing and retention.
Loss of subscription entitlement locks normal access and invoice sending. Hosted customer data remains available for billing recovery and permitted export for 30 days from the lock date. Recovery cancels scheduled deletion. After this period deletion becomes due and is attempted promptly, subject to final entitlement, ownership and safety checks. Unresolved blockers can defer permanent deletion. We retain only minimised deletion/security records and a keyed identity reference to prevent repeated free trials. This does not delete financial records independently retained by Stripe. Infrastructure backup retention follows the hosting provider's controlled retention process.