Privacy policy
Last updated: [DATE]
This policy explains what information ZyroBooks collects, why, and how it is protected. ZyroBooks is provided by [REGISTERED BUSINESS NAME], [ADDRESS] ("we", "us"). If you have questions, email support@zyrobooks.uk.
Two kinds of information
Your account information - your name, email address, username and login settings. We decide how this is used, so for this information we are the data controller.
Your business records - everything you put into your company's books: customers, suppliers, invoices, stock, bank statements, and employee and payroll details. This information belongs to your company. You decide what goes in and how it is used; we store and process it only to provide ZyroBooks to you. For this information your company is the data controller and we act as its data processor.
What we collect
| Information | Why we need it |
|---|---|
| Name, email address and username | To create your account, let you log in, and send you service emails such as password resets and invitations. |
| Your password | To let you log in. We store only a secure one-way hash, never the password itself. |
| Two-step login settings | To protect your account if you switch on two-step login. |
| Your business records | To provide the accounting service you use them for. |
| Subscription payments and receipts you upload | To confirm payment and keep your subscription active. |
| Technical information: IP address, browser type, and the date and time of requests | To keep the service secure, prevent abuse (for example, limiting repeated login attempts) and fix problems. |
Cookies
ZyroBooks uses only the cookies it needs to work: one that keeps you logged in during a visit, one that remembers you if you tick "Remember me", and one that protects forms against misuse. We do not use advertising or tracking cookies, and this website does not use analytics cookies.
Who else handles your information
We use a small number of trusted providers to run ZyroBooks. They may only use your information to provide their service to us:
- Hosting - [HOSTING PROVIDER, e.g. Railway], which runs the application and its database.
- Website, domain and email forwarding - Cloudflare.
- Email delivery - [EMAIL PROVIDER], which delivers emails the service sends, such as password resets and invoices you choose to email.
- Card payments - [PAYMENT PROVIDER, e.g. JazzCash], when you pay for a subscription by card. We never see or store your full card details.
When you choose to submit an invoice to the Federal Board of Revenue (FBR), ZyroBooks sends that invoice's details to the FBR using the credentials you provide. We do not share your information with anyone else, and we never sell it.
Where it is stored
Your information is stored on servers operated by our hosting provider in [REGION / COUNTRY]. Where information is transferred between countries, we rely on appropriate safeguards required by law.
How we protect it
- All connections are encrypted (HTTPS).
- Each company's records are kept separate, and no company can see another's.
- Sensitive settings, such as FBR and email passwords you save, are encrypted in the database.
- Access within a company is controlled by roles you assign, and changes are recorded in an audit trail.
- You can protect your account with two-step login.
- The database is backed up every night, and each backup is checked.
How long we keep it
We keep your information while your account is active. If a company is deleted, its records are removed from the live system straight away. Copies can remain in our backups for up to 12 months, after which they are deleted as backups rotate. We may keep payment records for longer where the law requires it.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to restrict or object to how it is used, and to receive a copy of it. Company admins can download a complete copy of their company's records from ZyroBooks at any time. To use any of your rights, email support@zyrobooks.uk.
If your information is part of a company's records (for example, you are that company's employee or customer), please contact that company first: they control that information.
If you are in the United Kingdom, you can also complain to the Information Commissioner's Office (ico.org.uk).
Children
ZyroBooks is a business service and is not intended for anyone under 18.
Changes to this policy
If we change this policy in a way that matters, we will tell account holders by email or inside ZyroBooks before the change takes effect.