← Back to Accounts In 1

Privacy Policy

Last updated: [DATE YOU PUBLISH THIS]

This policy explains what personal information [YOUR REGISTERED BUSINESS NAME] ("Accounts In 1", "we") collects, why, and how long we keep it. It covers both this website and the Accounts In 1 application.

Who we are

[YOUR REGISTERED BUSINESS NAME], [REGISTERED ADDRESS], Ireland. Company registration number [CRO NUMBER]. For any privacy question, or to exercise the rights below, contact info@accountsin1.com.

1. When you contact us through this website

If you send a message using the contact form, we collect:

• your name, email address and the content of your message;
• your IP address and browser user-agent string.

The name, email and message are used only to reply to you. The IP address and user-agent are collected to prevent spam and abuse of the form (our legitimate interest), and are deleted after 90 days. The message itself is kept for up to 24 months so we have a record of our correspondence, then deleted.

2. If you have an account

To provide the application we store:

• your name, username and email address;
• a cryptographic hash of your password — never the password itself;
• which organisations and features you are permitted to use;
• session records, and a short-lived log of failed sign-in attempts, both of which include your IP address and browser user-agent, kept to protect accounts against unauthorised access.

This is processed to perform our contract with you and to keep the service secure. We keep it for as long as your account is active, and for [RETENTION PERIOD — e.g. 12 months] afterwards.

3. Information your organisation enters

The application stores the accounting and donation records your organisation chooses to enter. These can include personal information about other people — for example donor names and addresses, and the contact details of staff and officers. For this information your organisation is the data controller and we act as a processor on its instructions: we do not use it for our own purposes, and we hold it under the agreement between us. [CONFIRM WITH YOUR REVIEWER — this determines whether a separate Data Processing Agreement is required with each organisation.]

4. Cookies and local storage

We set a single session cookie when you sign in, so the application knows you are logged in. It is strictly necessary for the service to work and is not used for advertising or tracking. Parts of the application also store data inside your own browser so that it keeps working offline; that data stays on your device and is cleared when you sign out or clear your browser storage.

5. Who else sees your data

We do not sell personal information. We share it only with the services needed to run the product:

• Mailgun (EU region) — sends our email, such as password resets and contact-form notifications.
• [HOSTING PROVIDER] — hosts the servers and databases.
• [BACKUP PROVIDER] — stores encrypted backups.
• This marketing website also loads fonts and code libraries from third-party networks (Google Fonts, Cloudflare, unpkg, jsDelivr). Doing so discloses your IP address to those providers. [REVIEWER: consider self-hosting these to avoid it.]

6. Your rights

Under the GDPR you may ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email info@accountsin1.com and we will respond within one month. If you are unhappy with our response you may complain to the Irish Data Protection Commission at dataprotection.ie. Where your organisation is the controller (section 3), please contact that organisation first.

7. Changes

If we change this policy we will update the date at the top of this page.

← Back to Accounts In 1