Privacy Policy

1. Information we collect

Account information: your name, email address, and authentication credentials managed by our authentication provider.

Xero financial data: when you connect a Xero organisation, we retrieve and cache Profit & Loss and Balance Sheet reports, manual journals, organisation details, and tracking categories. See Data & Xero Access for the exact scope of access requested.

Usage data: basic technical information needed to operate the Service (for example, sign-in events).

2. How we use your information

We use your data to provide consolidated multi-entity reporting, variance and cash analysis, anomaly detection, and AI-assisted commentary. We do not sell your data, and we do not use your financial data to train machine-learning models.

3. AI processing

AI features (the “Ask the CFO” assistant, board briefs, and digests) send relevant, structured slices of your financial data to our AI provider, Anthropic, solely to generate the response you requested. Anthropic does not use data submitted via its API to train its models. The assistant only ever receives data your account is permitted to see.

4. Storage, security, and subprocessors

Data is stored in a managed PostgreSQL database (Supabase). Access is enforced at the row level so each user only sees organisations they are a member of. Xero access and refresh tokens are encrypted at rest using AES-GCM.

We rely on the following subprocessors: Supabase (database, authentication, hosting), Anthropic (AI processing), and Resend (transactional email). Each processes data only as needed to deliver the Service.

5. Data retention

We retain cached financial data for as long as your organisation remains connected and your account is active. You may request export or deletion of your data at any time (see below).

6. Your rights

You may request access to, export of, or deletion of your data, and you may disconnect a Xero organisation at any time from within the Service. To make a request, contact us at welcome@homeplanner.io.

7. Cookies and local storage

Within the Service we use only essential browser storage required to keep you signed in and remember interface preferences. We do not use third-party advertising or tracking cookies.

On this marketing website we use Google Analytics and Ahrefs Web Analytics to understand which pages are read. Neither is loaded unless you accept it: until you choose, and permanently if you decline, no analytics script is fetched and no analytics cookie is set. The only thing stored in that case is your choice itself, so we do not ask again on every page.

Where analytics is accepted, Google Analytics sets cookies to distinguish visitors and sessions, and receives your IP address in truncated form. Ahrefs Web Analytics does not set cookies; it receives the page you viewed, the referring page and basic browser details. Neither is used for advertising, and we do not combine either with anything you send us through the contact form. You can withdraw consent at any time by clearing this site’s data in your browser, which returns the site to its unmeasured state and prompts the choice afresh.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

9. Contact

Willow Park Ventures Pty Ltd — welcome@homeplanner.io. This policy is governed by the laws of New South Wales, Australia.