Skip to main content
AccountDesq

Privacy Policy

Last updated: October 8, 2026

Free tools: no server storage

What you type into the free calculators and generators never leaves your browser.

Workspace: your data, isolated

Each workspace's business data is kept separate from every other workspace's at the database level.

You're in control

Download, correct, restrict or delete your data yourself from Settings - no email needed.

1. Overview and who we are

Accountdesq ("we", "us", "our") operates accountdesq.com, which offers two distinct things: (A) free, browser-based accounting tools and calculators that need no account, and (B) the AccountDesq workspace - an account-based accounting platform for businesses. This policy covers both and says which part applies to which. AccountDesq is an early-stage product; this policy describes what we do today, not aspirations.

2. The free tools (no account)

When you use the Invoice Generator, the Profit & Loss tool or any other calculator without signing in, everything you type - business names, amounts, client details, line items - is processed entirely in your web browser. This data:

  • Is never sent to our servers
  • Is never stored in any database we operate
  • Exists only in your browser while the page is open
  • Is lost when you close or refresh the tab, unless you saved a PDF or Excel file to your own device

PDF and Excel exports from the free tools are generated in your browser and download straight to your device.

3. The AccountDesq workspace (account required)

A workspace needs an account. Sign-in is handled by our authentication provider (email and password, or a supported sign-in such as Google or Microsoft). The business data you enter - customers, vendors, items, invoices, bills, payments, bank transactions, journal entries, tax records, documents and attachments - is stored in our database so it is available across sessions and to your team.

  • Each workspace's data is isolated from every other workspace's at the database level
  • Access inside a workspace is controlled by the roles and permissions its Owners set
  • Card details are handled directly by our payment processors, Stripe and Razorpay - we never store your full card number
  • Particularly sensitive fields, such as vendor payment and remittance details, are encrypted at rest

4. Your data vs. a business's data

We handle two kinds of data, and who decides about it differs:

  • Your account - your name, email, sign-in, preferences and activity as a person. We decide how this is used, and you can download, correct, restrict or delete it yourself (Section 9).
  • A workspace's business records - its books, invoices, customers, vendors and documents. These belong to the business that owns the workspace. We store and process them on that business's behalf, to provide the service it signed up for. If a business holds information about you (for example, you are one of its customers or suppliers), please contact that business first - it decides what happens to its records. We will help it respond.

5. What we collect and why

  • Account

    What it includes
    Name, email, sign-in method, preferences
    Why we use it
    To give you an account and run the service you asked for
  • Workspace records

    What it includes
    The business data entered into a workspace
    Why we use it
    To provide the service to the business that owns the workspace
  • Billing

    What it includes
    Plan, invoices we issue, billing contact; card data stays with Stripe / Razorpay
    Why we use it
    To bill for subscriptions and keep the records tax and company law require
  • Security and activity logs

    What it includes
    Sign-in and security events, and who changed what in a workspace
    Why we use it
    To keep accounts and data secure, investigate misuse, and give businesses an audit trail
  • Consent records

    What it includes
    Your privacy choices with the date, IP address and browser at the time
    Why we use it
    To prove what you agreed to and when
  • In-app usage analytics

    What it includes
    Which features, commands and shortcuts are used (counts, not your business data)
    Why we use it
    To improve the product. On by default; switch it off any time in Settings › Data & privacy
  • Email delivery logs

    What it includes
    Which service emails were sent to you and whether they were delivered
    Why we use it
    To deliver and troubleshoot service emails
  • Website analytics

    What it includes
    Page views and interactions on accountdesq.com
    Why we use it
    To understand how the site is used - only after you opt in (Section 6)
  • Product news emails

    What it includes
    Your email address
    Why we use it
    Occasional product news - only if you opt in; service and security emails are always sent

Our hosting providers also keep standard server logs (IP address, browser type, time) for a short period for security and abuse prevention. We do not sell personal information, and we do not share it for advertising.

6. Cookies and analytics

We ask for consent in two categories, shown in the cookie banner on your first visit and changeable any time from the Cookie Preferences link in the footer. Rejecting analytics is exactly as easy as accepting it, and never blocks you from using the site. Accountdesq does not run advertising or use an ad network.

  • Essential

    Purpose
    Sign-in, security, and remembering your theme and cookie choice
    Provider
    Accountdesq
    Your control
    Always on - required for the site to work
  • Analytics

    Purpose
    Understand how the site is used, so we can improve it
    Provider
    Google Tag Manager / Analytics
    Your control
    Off until you opt in

Google Tag Manager uses Google Consent Mode: until you opt in, analytics stays "denied" and the tag runs in a restricted mode. We do not use Facebook Pixel or similar trackers. Your browser's local storage remembers your theme, your cookie choice and, in the workspace, conveniences such as recent searches - these stay on your device.

7. Service providers (sub-processors)

AccountDesq relies on established infrastructure and service providers ("sub-processors") that hold industry-recognised security certifications such as SOC 2 or PCI DSS. Each is bound by data-processing terms that allow it to process personal data only on our instructions and only to deliver its service to us, under strict security and confidentiality obligations - never for its own purposes. We use sub-processors for:

  • Cloud hosting and database - run the application and website, and store workspace and account data
  • Authentication - sign-in and account security
  • Email delivery - service emails such as invitations, sign-in links, receipts and privacy notices
  • Payment processing - Stripe and Razorpay process subscription payments. You deal with them directly when you pay, so they also handle payment details under their own privacy policies.
  • Website analytics - Google Analytics, through Google Tag Manager, only if you opt in (Section 6)

We maintain a current list of our sub-processors, with the purpose and processing location of each. Customers can request it at any time through the contact details in Section 15.

8. Where your data is stored

Workspace and account data is stored in the United States, in data centres run by a major cloud provider. Our other providers may process data in the United States and other countries. Wherever it is processed, it is protected as this policy describes.

9. Your rights and how to use them

Depending on where you live, privacy laws give you rights over your personal data. We offer the same tools to everyone, and most of them work instantly in Settings › Data & privacy - no email needed:

  • Get a copy of your data

    How
    Request my data - a ZIP of everything we hold about you as a person (including receipts you uploaded). The download works for 7 days, only for you while signed in. Workspace Owners can also export a whole workspace.
  • Correct it

    How
    Edit your name, email or password in Settings › Profile, or send a correction request - we reply within one month.
  • Limit how it is used

    How
    Switch on Restrict processing (we stop everything non-essential), and switch off usage analytics or product news at any time.
  • Take a break

    How
    Deactivate your account - nothing is deleted, and you can come back by signing in.
  • Delete your account

    How
    Delete my account - see Section 10 for exactly what is deleted and what is kept.
  • Close or delete a workspace (Owners)

    How
    Close it (read-only, reopenable), or delete it permanently once closed - see Section 10.

To protect you, sensitive actions ask you to confirm it is you again (your password or a one-time code sent to your email). There is no fee. If you can't use the self-service tools, email us (Section 15) and we will respond within one month. You also have the right to complain to your local data protection authority.

10. What happens when you delete

Deleting your account runs after a 14-day cooling-off period (or 24 hours, if you choose). We email you a link to cancel, and remind you 48 hours before it runs. Then:

  • Deleted: your sign-in account and every session, your name, email and photo, your notifications, preferences, usage history, saved reimbursement bank details, data downloads, newsletter records and pending invitations.
  • Anonymized: business records you created in a workspace - invoices, journals, payments, bills, tax records, bank transactions and activity history - stay with that business, shown as created by "Deleted user". Deleting your account never deletes a business's accounting records.
  • Kept where the law requires: our own invoices for subscriptions you paid for, a record of your consents, security logs, and anything covered by a legal hold - for the periods in Section 11, used for nothing else.
  • Backups: older encrypted backups are kept out of use until they expire on a short, fixed schedule; if a backup is ever restored, your deletion is applied again first.

When it is done you receive a certificate of deletion listing what was deleted, anonymized and kept, which anyone can verify on our website. If you are the only Owner of a workspace that other people use, you will be asked to hand it over or close it first - deleting a person never deletes a business.

Deleting a workspace (Owners only) requires closing it first, then runs after a 30-day cooling-off period. Every Owner is emailed with a link to cancel. All of its records, documents and activity history are deleted, and the payment provider is asked to delete the saved card details. We keep only our own invoices for its subscription. The law may require your business to keep its accounting records for years - export them before you delete.

Legal holds: if records are needed for a legal claim, an investigation or a dispute, we may place a hold on just those records. They are kept, unused, until the hold ends, then deleted automatically. Everything else is deleted as normal.

11. How long we keep data

  • Your account

    Kept for
    While your account exists; deleted or anonymized when you delete it
  • A workspace's business records

    Kept for
    Until an Owner deletes the workspace - the business decides, and the law often requires it to keep accounting records for 6 to 8 years
  • Data downloads (exports)

    Kept for
    7 days
  • Security logs

    Kept for
    At least 24 months - they protect accounts against misuse and are not used for anything else
  • Consent records

    Kept for
    36 months after the account is deleted
  • In-app usage analytics

    Kept for
    13 months
  • Email delivery logs

    Kept for
    24 months
  • In-app notifications

    Kept for
    6 months
  • Our own invoices and billing records

    Kept for
    As tax and company law require - in India, for example, 72 months from the due date of the annual GST return and 8 financial years under the Companies Act
  • Data under a legal hold

    Kept for
    Until the hold ends

Data downloads, notifications, usage analytics, email delivery logs and consent records are deleted automatically when their period ends.

12. Security

See our Security page for how workspace data is protected - workspace isolation, role-based access, approvals, audit trails and encryption.

13. Age requirement

AccountDesq is a business tool for people aged 18 or over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.

14. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The "Last updated" date shows the latest version. If a change materially affects how we use your personal data, we will tell account holders by email or in the app before it takes effect.

15. Contact us

Most requests are fastest in Settings › Data & privacy. For anything else about this policy or your data - including a request you cannot make yourself - email sales@accountdesq.com. We reply within one month.

In short: use the free tools and nothing you type reaches our servers. Create a workspace and your business data is stored securely, isolated to your workspace and protected by role-based access - and you can download, correct, restrict or delete your own data yourself, any time.