Privacy Notice

Effective date: 31 October 2026

  1. The Operator, Y & P, decides how personal data in the Service is used.
  2. The Service handles the following data. Account data is the name, email address and profile picture received from the Google account at sign-in. Business records are the customer names, email addresses, orders and expenses that a User enters or imports. Assistant conversations are the messages sent to the AI assistant and its replies. Technical logs, such as network address and request time, may be recorded by the hosting provider.
  3. This data is used to sign Users in, to display and process records, to answer questions through the AI assistant, to secure the Service and to keep backups. It is not used for advertising.
  4. The Service sets only three cookies. The session cookie keeps a User signed in for up to seven days. The theme cookie remembers the chosen appearance for up to one year. A temporary cookie lasts ten minutes during Google sign-in. The Service uses no advertising or analytics cookies.
  5. Service providers process data on behalf of the Operator: Google for sign-in, Railway for hosting and the database, and DeepSeek for the AI assistant. When a User sends a message to the assistant, the message and the record figures needed to answer it, such as totals, order counts and customer names, are sent to DeepSeek. The Operator does not sell personal data.
  6. Data is stored in Singapore.
  7. Records and conversations are kept until they are deleted. Database backups are kept for up to thirty days.
  8. Access is limited to approved Users, and data is sent over encrypted connections. No method of storage or transmission is completely secure.
  9. A User may ask the Operator for access to, correction of, or deletion of personal data by writing to [email protected].
  10. The Service is not intended for persons under eighteen years of age.
  11. The Operator may update this Notice. The effective date shows the latest version.