Privacy policy
Acocite is run by Uniquemood GmbH, In der Pünt 6, 8317 Tagelswangen, Switzerland (CHE-433.016.381). We are the controller for the data described here. Write to privacy@acocite.app about any of it.
Acocite is a bookkeeping tool, so it holds two different kinds of information: yours, and your clients'. That second kind is unusual for a small product and we treat it as the more serious of the two.
What we hold about you
- Your account. Your email address, and the identifier your sign-in provider gives us. We never see or store your password.
- Your business profile. Business name, address, tax number, logo, currency, payment terms and document preferences.
- Your payment details as printed on invoices. Bank name, account holder, IBAN or account number, BIC and any payment link you add. These exist so they can be shown on your documents. They are not used to move money and we never initiate a payment from them.
- Your work. Invoices, quotes, contracts, projects, payments and ledger entries you create.
- Your conversation. The messages in your chat thread and any files or images you attach, including bank statements you upload.
- Usage. Which AI calls your account made, how large they were, and what they cost. This is what your credit balance is calculated from.
What we hold about your clients
When you add a client or import your old invoices, we store their name, contact person, email, phone, billing address, tax number and the documents and amounts between you. You decide what goes in. For this information you are the controller and we are your processor: we hold it to run the service for you, act on your instructions, and do not use it for anything of our own.
Why we are allowed to hold it
- To provide the service you asked for. Your account, documents and chat exist because performing our contract with you requires them.
- Because we have to. Records of what was invoiced and paid are kept where bookkeeping and tax law requires it.
- Because it is reasonable and expected. Security, abuse prevention and measuring usage so we can bill fairly and keep the service running.
We do not sell your data, we do not advertise, and we do not build profiles of you. There is no analytics or tracking script on the app, and the only cookies we set are the ones that keep you signed in. That is why you are not asked to accept cookies.
The AI, specifically
What you type in the chat, and the files you attach, are sent to Anthropic so the model can answer. That includes bank statements and documents you upload for import, because reading them is the point. Your data is not used to train models. We send only what a request needs and no more.
If that is not acceptable for a particular client or document, do not put it in the chat. Everything you have already created stays available whether or not you use the AI.
Who else touches it
These are our sub-processors. If we add or replace one we will update this list, and for material changes we will tell account holders before it takes effect.
| Who | What for | Where |
|---|---|---|
| Vercel | Hosting and serving the application | United States and European Union |
| Supabase | Database and sign-in. Your account, documents and client records live here | the European Union |
| Anthropic | The AI that answers in the chat and drafts documents. Receives the text and files you send it | United States |
| Sign-in, if you choose to sign in with a Google account | United States and European Union | |
| Resend | Delivering documents you choose to email to your clients | United States and European Union |
| Paddle | Payments, and the merchant of record for any subscription or credit you buy | United Kingdom, United States and European Union |
Your database sits in the European Union. Some of the services above process data in the United States, which we rely on standard contractual clauses and their own transfer frameworks for.
How long we keep it
- While your account is open, we keep what you have created, because deleting your invoices would defeat the point of the tool.
- When you close your account, we delete your data immediately. Closing is in Settings under Your data, and it removes everything: documents, clients, payments and your books. We keep a one-way hash of your email address afterwards, so that closing and re-registering cannot be used to collect the free starting credits repeatedly. The hash cannot be turned back into your address and is attached to nothing else.
- Waitlist addresses are kept until you ask us to remove them or we stop running the waitlist.
What you can ask us to do
You can ask for a copy of your data, correct it, delete it, restrict what we do with it, or object to it. You can also complain to a data protection authority. Most of this you can do yourself in the app without asking anyone: Settings → Your data has a one-click download of everything on your account as a single file, and the button that closes it for good. Your documents and client records are editable and deletable at any time. For anything else, email privacy@acocite.app and we will respond within 30 days.
If you are asking on behalf of one of your clients, come to us and we will help, but the relationship is with you: you are their controller.
Security, honestly stated
Data is encrypted in transit and at rest, access is scoped so one account can never read another's, and sign-in is handled by an established provider rather than by us. Acocite is a small product built by a small team, and no service can promise perfect security. If something goes wrong that affects your data we will tell you, and we will tell you what actually happened.
Changes
When this policy changes we update the date at the bottom of the page. If a change meaningfully affects what we do with your data, we will tell account holders directly rather than relying on you to re-read it.