Privacy

Automate AI Limited, New Zealand.

What we store. Your Xero user id, name and email; the names and ids of the organisations you connect; your Xero access and refresh tokens, encrypted; hashes of any API keys you create; and a log of each write request made through the service (which organisation, which endpoint, the data sent and the result). Bank account and tax numbers are removed from that log before it is stored.

What we do not store. Your Xero password, and the data returned when your AI tool reads from Xero. Read results pass through to your AI tool and are not kept.

How it is used. Only to operate the service: to call Xero on your behalf and to keep a record of changes. We do not sell your data or use it to train AI models.

Where it is held. Amazon Web Services, Sydney region.

Your AI tool. Data your AI tool reads from Xero is handled by that tool's provider under their terms, not ours.

Deleting it. Deleting your account at /connect disconnects your organisations, removes your tokens and keys, and signs out every AI app and browser you connected. Write logs are kept for seven years as a record of changes made, encrypted with a key only this service can use; ask us if you want them removed sooner.

Contact. andy@automateai.co.nz. You can ask for a copy of, or a correction to, the information we hold about you under the Privacy Act 2020.