What we collect, and what we don't.

Finio is a trading name of KRBUK Limited, a company registered in England and Wales under number 16247154, with its registered office at 2 Paul Street, London, E15 4QD, England.

KRBUK Limited is the data controller for everything on this page, and is registered with the Information Commissioner’s Office under ZC076226 — checkable on the ICO’s public register, where the entry appears under the company name. Write to info@getfinio.co.uk about anything here.

This policy is about the website. When you connect the product to your ledger the relationship is different — there we act as your processor, under a data processing agreement, and security and trust sets out that side.

Reading the site

We use Google Analytics to count visits and see which pages get read. It sets a cookie, so we ask first: until you press Allow, none of it is loaded — no script fetched, no cookie set, no request made to Google. Decline and that stays true.

If you allow it, Google Analytics records the pages you visit, roughly where in the world you are, and what kind of device and browser you used. We use it to see which pages are worth keeping. It is not linked to anything else we hold, and there is no advertising pixel on this site.

The lawful basis is your consent, and you can withdraw it here at any time — the switch below is the same choice the banner offered.

Our host keeps ordinary server logs, which include your IP address, as every web server does; we do not build anything from them.

Running the demo

The demo asks for your email address before it will run, and you upload a document — an invoice, a credit note, a supplier statement, or an export from Xero.

The document is sent to Google to be read, held in memory while it is processed, and discarded. We do not store it, we do not keep a copy of what was in it, and neither we nor anyone else uses it to train a machine-learning model.

Your email address is kept, in one row, with the date, whether the run succeeded, and — where we read one — the document type, the supplier name and how many lines came back. Not the document, and nothing from inside it beyond those few fields.

Two things depend on that row: following up with you about your run, and the free limit of two runs per address. It is not shared, not sold, and not added to a mailing list. You also get an email about it, which sits in our own inbox like any message you might have sent us directly.

The run counter is a cookie holding a single number — how many times this browser has run the demo, up to the limit of two. It is signed so it cannot be edited, it carries nothing that identifies you, and it is not read for any other purpose. It expires after six months, and clearing your cookies removes it.

The lawful basis is our legitimate interests — answering a business enquiry you started, and stopping a free tool being run without limit — and, where you are asking us about buying the product, taking steps at your request before entering a contract. You can object at any time by writing to us, and we will delete the record.

The accountant waiting list

If you join the waiting list on the accountants page we keep your email address, and your practice name if you gave one, so we can tell you when practice access opens. That is the whole purpose. It is not stored in a database — it reaches us as one email and sits in our inbox as correspondence — and it is not added to a mailing list or passed to anyone.

The lawful basis is our legitimate interests: you asked us to contact you about the product. Reply to us at any time and we will take you off.

Getting in touch

The contact form on this site does not submit anything to us. It composes a message in your own email client, and nothing reaches us until you press send there. Email we receive we keep as correspondence.

Booking a call opens Google Calendar’s own booking page in a new tab. What you type there is handled by Google under its terms, and reaches us as an entry in our calendar.

Where a processor is outside the UK, the transfer is covered by the UK’s international data transfer agreement or the addendum to the standard contractual clauses. Nobody on this list is allowed to use your data for their own purposes.

Documents put through the demo are not kept at all. The demo record — your email address and what you ran — is kept for two years from your last run, then deleted. Email correspondence is kept while it is useful and reviewed periodically. If you ask us to delete something sooner, we will.

Under UK data protection law you can ask for a copy of what we hold about you, ask us to correct or delete it, ask us to restrict what we do with it, object to us relying on legitimate interests, and ask for it in a portable form. There is no charge and we will answer within a month.

Write to info@getfinio.co.uk. If we handle it badly you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first.