Privacy policy.

Last updated 11 October 2026

Who this is

AI Accountant is run by Rajarshi Nandi. It is not a registered accountancy service. This page describes what the live app does with data when you connect a Xero organisation. The demo at /demo uses a demo company and runs entirely in your browser: nothing is sent to a server and nothing is written to Xero.

What we collect

When you connect Xero, the app reads your chart of accounts, bank transactions, invoices and payments through the Xero API and stores them in a PostgreSQL database hosted on Railway. Transaction descriptions can include the names of the people and businesses you pay or are paid by. The Xero consent screen asks for read-only access; the app never writes anything back to Xero. Connections made before 11 October 2026 were also granted write permissions on bank transactions, invoices and contacts that the app never used; disconnecting the app in Xero's connected-apps settings removes them.

How we use it

To propose a category, the date, amount, description, reference, your chart of accounts and a few of your own previously categorised transactions are sent to Anthropic's Claude API. Descriptions may include payee and customer names, so personal data can reach Anthropic in that step. To draft a management letter, aggregated figures (totals, top categories, largest transactions) are sent to the same API. Reconciliation runs locally with no AI service. The explainability layer can fit a small interpretable model on your organisation's own categorised transactions once fifty exist; that model is being retired because Xero's developer terms forbid training models on API data.

Who else processes data

• Anthropic (US): transaction details and aggregated figures for categorisation and narrative drafting.
• Railway: hosts the API and the database. The hosting region is being confirmed and is not yet guaranteed to be in the UK or EU.
• Vercel: hosts this website.
• Sentry: receives error reports tagged with your organisation id and name, when error tracking is enabled.
• Resend: sends team invitation emails, which contain the invitee's name and email, the inviter's name and the organisation name.

Storage and retention

Xero access and refresh tokens are encrypted at rest. Data is kept until you erase it; there is no automatic retention limit yet. Audit records of AI proposals and human decisions are append-only by convention, not enforced at the database level.

Your rights under GDPR

• Access and portability (Art. 15/20). Export everything held about your organisation as JSON via GET /api/v1/gdpr/export.
• Erasure (Art. 17). Delete all of your organisation's data via DELETE /api/v1/gdpr/erase; your session is invalidated immediately.
• Explanation (Art. 22). Every AI categorisation stores its reasoning, confidence and risk assessment, available via GET /api/v1/transactions/{id}/explanation.
• Disconnect Xero. Remove this app at any time from your Xero organisation's settings under Connected apps, then erase your data here.

Contact

Questions? Email rajarshin264@gmail.com