What we collect
We keep this deliberately small. To run and support the connectors we record who connected and how much they use the service — and nothing about your accounting.
What we store
| We store | Why | Where |
|---|---|---|
| Your name and email address | To know who is using the service and to contact you about it | Encrypted, UK |
| Your organisation name | To tell your connections apart | Encrypted, UK |
| A provider user id | A stable identifier from QuickBooks or Xero | Encrypted, UK |
| Your access tokens | So the connector can read on your behalf | Encrypted, UK |
| Counts of requests, and which commands were used | To see if the service is working and being used | UK logs, 30 days |
What we never store
- Any accounting data. No invoices, contacts, balances, transactions, reports or totals are ever written down by us. Your data passes through and is gone — see How it works.
- The contents of your requests. We record that a command such as
list-invoicesran, never what it asked for or what came back. - Anything that could identify you inside our logs. Usage is recorded against a random connection id, not your name or email.
That last point is the important one: the record of who you are and the record of what you did are kept separately, and only ever brought together by us when we need to answer a question like "is this customer's connection healthy?"
Where it lives
Everything is in the United Kingdom (Azure UK South), encrypted at rest. Usage logs are kept for 30 days and then deleted automatically. See Data & residency for the full picture.
Deleting it
Disconnect the connector in your AI assistant, or revoke access from your QuickBooks or Xero account. Your name, email, organisation and tokens are erased. All that remains is an anonymous count of past requests, which cannot be traced back to you.
To ask what we hold about you, or to have it removed sooner, contact AI Gurus Group.