Last updated September 2026
Privacy policy
This policy explains what we collect, why we collect it, and the limits we place on ourselves. It is written to be read, not to be survived.
What we collect
Two kinds of information. First, details you give us directly — your name, work email, company and anything you write in a form or a message. Second, the financial records we need in order to keep your books: transactions, statements, invoices, receipts and payroll summaries drawn from the systems you connect.
Why we hold it
To deliver the service you have engaged us for, to meet our professional and legal obligations as your bookkeeper, and to support you when you ask. We do not sell personal data, we do not share it with advertisers, and we do not use the contents of your ledger to train shared models.
Who else sees it
A small set of subprocessors: cloud hosting, bank data aggregation, document storage, messaging delivery and model inference. Each is bound by contract, operates under zero-retention terms where models are involved, and is listed in the subprocessor register available at security@acruee.com.
Where it lives
In the region you operate in. Records for clients filing in the United States are processed and stored there; records for UK and EU clients remain in the European Economic Area.
How long we keep it
For as long as you are a client, and then for the period our professional and statutory obligations require — typically six years for accounting records. Outside that, we delete on a fixed schedule and confirm when it is done.
Your rights
You can ask us for a copy of what we hold, ask us to correct it, ask us to delete what we are not obliged to keep, or object to a particular use. Write to privacy@acruee.com and we will respond within thirty days.
Changes
If we change this policy in a way that materially affects you, we will tell you directly rather than quietly updating the date at the top.