Privacy policy

What we collect

We store only what the product needs to keep your business diary:

• Your account details (name, email, password hash) and workspace profile (business name, currency).

• Your business records — clients, jobs, invoices, quotes, expenses, inventory, calendar events and notes.

• AI assistant conversations, kept inside your own account with a per-conversation token cap.

We do not sell your data to anyone, and we do not use your business records to train models for other customers.

How your data is used

Your data is used to run PlusWise for you: rendering your pages, calculating your reports, and powering the AI assistant that acts on your own records. The assistant only ever sees your account’s data, and every action it takes requires your confirmation and is logged in your audit trail.

Cookies and local storage

We use a session cookie to keep you signed in and a small amount of local storage for preferences such as theme. We do not run third-party advertising or cross-site tracking scripts — see our Cookie policy for the full list.

Your rights

You can export everything we hold about you at any time as a single JSON bundle (Settings → account), and you can request deletion of your account and data from the same place.

A deletion request takes effect immediately for sign-in (your account is flagged and locked). Your records are physically purged after a 30-day grace window, which exists so an accidental request — or a stolen session — cannot erase your business permanently. Support can restore an account inside that window.

Security

Passwords are stored as salted hashes, integration credentials are encrypted at rest and stripped from exports, and all traffic is served over HTTPS. If you believe your account has been compromised, contact us immediately at the address below.

Contact

Questions about privacy or a data request? Email support@pluswise.co.uk — a person reads every message.