BulkBooks for Xero - Privacy policy (last updated 14 October 2026)

Your accounting data stays where it is. The add-on works inside your Xero tab and reads or edits invoices only when you ask it to, using Xero's own pages. We never send your invoices, contacts, amounts or any other accounting data to our servers, and we cannot see them.

What we collect - only if you use Pro, and only after you agree in Firefox's own prompt:
- Your email address: to match your payment to your licence and to recover your key.
- Your licence key: to check your Pro plan is active (about once a day). We store it only as a one-way hash plus an encrypted copy.
- A random browser ID: to limit a key to 2 browsers. It is random, not linked to your device, and stored only as a one-way hash.
- Payment details from our payment provider (name, email, phone if given, amount, payment reference): to issue your key when your payment is confirmed.
We never receive your card number; card payments are handled entirely by SupraPay. Free features send no data at all.

We do not sell, rent or share your data for advertising, track your browsing, use analytics or advertising trackers, or load code from the internet. The add-on only runs on go.xero.com.

Services we use: SupraPay (payments), Render (hosts the licence service), Supabase (licence database), Telegram (the operator receives a sale notification showing a shortened email, never your key).

Stored on your computer: settings, your licence key and the random browser ID. Removing the add-on deletes them; "Remove key" also frees that browser's slot. You can withdraw Firefox data consent at any time in about:addons, and the daily licence check then stops.

We keep licence and payment records while your licence is active and up to 2 years afterwards, for support, refunds and accounting. Ask us to delete your data at any time, unless we must keep a payment record by law.

Full policy: https://bulkbooks-licensing.onrender.com/privacy