Privacy policy

1. In short

You upload financial documents. We store them in the EU, use them only to give you back the figures, and never sell them. You can delete anything, or everything, at any time. The rest of this page is the detail behind that, written under the GDPR and the ePrivacy Directive.

2. Who we are

MsyeAI is a registered business name operated as a sole trader in Ireland by Mohammad Syed, and is the data controller for the personal data described here. You can reach us at hello@msyeai.com.

3. What we collect

• Who you are — your name and email address, and your practice name if you give it.
• What you upload — the receipts, invoices, bank statements and ledger entries you put into the service. These may contain personal data about your clients and their suppliers.
• Technical data — IP address, browser type and sign-in records, kept for security.
• How you found us — if you arrived from an advert or a link, we record which one, so we know what is worth paying for. This is only stored if you accept optional cookies.

4. Why we are allowed to hold it

For your account and the documents you upload, our lawful basis is performance of our contract with you. For security logging and for keeping the service working, it is our legitimate interests. For optional analytics and advertising cookies, it is your consent — which you can withdraw at any time by clearing the choice stored in your browser.

5. Where your data is stored

Your documents and ledger data are stored in the European Union — our database is hosted in Frankfurt and our application runs in Belgium. Some of the providers listed below operate outside the EU; where they do, transfers rely on the European Commission's standard contractual clauses.

6. Who else processes it

These providers process data on our behalf under Article 28 of the GDPR. We do not sell your data to anyone, and we do not share it for anyone else's advertising.

7. If you connect Google Sheets

We ask for the drive.file scope for one reason: to create new spreadsheets in your Drive and write your ledger data into them. This scope only grants access to files created by MsyeAI itself.

• We cannot read, change or delete any other file or folder in your Drive — Google enforces this at the permission level.
• The only data written is data you uploaded to MsyeAI in the first place.
• Google user data is never shared with third parties or passed to any external AI model. Your Google authorisation tokens are used in the moment and are not stored in our database.

8. How long we keep it

We keep your data for as long as your account is open, and afterwards only where a legal or accounting obligation requires it. When you delete your account, the financial documents you uploaded are permanently removed.

9. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it over in a portable format, or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Email hello@msyeai.com and we will respond within one month.

If you think we have handled your data badly, you can complain to the Irish Data Protection Commission at dataprotection.ie.

10. Cookies

We set a small number of cookies that are strictly necessary to keep you signed in and to take payments. Anything beyond that — analytics and advertising measurement — is only set if you choose "Accept all". Choosing "Essential only" means no analytics or advertising cookies are set at all.