WiFiSetup Finance is our private application for managing WiFiSetup’s own finances. Access is limited to the owner and named people invited to assist the business. We are responsible for this processing for our own business purposes; we do not operate Finance on Intuit’s behalf.

Information and sources. When the owner connects business accounts, Finance obtains information from Monzo Business and QuickBooks. This includes account and pot balances, transactions and payment references, customer and supplier contact details, invoices, bills, payments, credits, accounting categories and attachment details. Authorised users may upload invoices and receipts and add bookkeeping notes and proposed categories. Customer and supplier information may therefore come from these business records rather than directly from the individual.

Purposes and legal bases. We use this information to check purchases, maintain accounting evidence, understand available funds and identify outstanding invoices. Accounting records required by law are processed to meet our legal obligations. Necessary business administration and access security are based on our legitimate interests in managing the business and protecting its records, taking account of individuals’ rights and expectations.

Invited users and advisers. We keep invited users’ names, email addresses, assigned roles, protected password records, invitation and recovery records, sign-in times and recorded actions. The owner or invited user supplies these details. An email address and password are needed to use an invited account. The owner may allow named accountants, bookkeepers or other advisers to inspect records or amend local reviews within their assigned role, solely for authorised WiFiSetup work. Our business email delivery provider sends invitations, password-reset links and related security messages, processing recipients’ email addresses, message content and delivery information for this purpose.

Providers and location. Finance uses connected banking and accounting services and a business email delivery provider. Our Finance server and operator-managed backups are in the UK. These external services have their own processing arrangements and may process information outside the UK, including in the United States. Their published safeguards include UK adequacy arrangements, the UK Extension to the EU–US Data Privacy Framework for participating organisations, or approved contractual safeguards, including the UK Addendum to EU Standard Contractual Clauses, as applicable to the service and destination. For details of the providers involved with your information or a copy of the relevant transfer safeguards, contact info@wifisetup.co.uk. Providers remain responsible for their own processing under their applicable terms and notices.

Security and cookies. Finance uses HTTPS, named accounts and restricted access. Passwords are hashed and integration secrets are encrypted; this does not mean that every stored financial record or backup is encrypted. Its essential sign-in cookie expires after 12 hours. Finance uses no advertising or analytics cookies. These are the controls currently implemented for Finance; no independent security certification or formal ongoing review programme is claimed.

Retention and disconnection. Business records are retained while necessary for their accounting purpose, statutory obligations or unresolved queries and claims. User-access and activity records are retained as needed for administration and security. The owner administers retention and deletion requests; Finance currently has no automatic retention-deletion schedule. Earlier copies can remain in backups until those backups are retired. Disconnecting a provider stops further imports through that connection but does not erase imported records. Provider consent can also be revoked in the provider’s account settings.

Your rights and use of automation. The rights and contact arrangements elsewhere in this policy apply to Finance, including restriction of processing where the law provides that right. Some records must be retained to meet legal obligations. Finance does not sell records or use them for advertising or model training. Its current deployed features do not send accounting records to a generative AI service or make solely automated decisions with legal or similarly significant effects. Purchase suggestions remain subject to human review.