Privacy policy

Cytron Limited is the data controller for account and marketing data, and a data processor for the accounting records you enter about your own customers, suppliers and employees. AccuKash is a Cytron brand.

Account data: name, email address, business details, and a hashed password. We never store passwords in a readable form.

Usage data: pages visited, features used, IP address, browser and device type — used to keep the service secure and to work out what to improve.

Billing data: handled by our payment processor. We store only the last four digits and card type.

Customer records: everything you enter about your business, held on your instruction.

Contract: to provide the service you have subscribed to.

Legitimate interests: to secure the platform, prevent fraud and improve the product.

Legal obligation: to keep financial records for the periods UK law requires.

Consent: for marketing email, which you can withdraw in one click.

Only the processors needed to run the service: our UK hosting provider, our payment processor, our Open Banking provider, our email delivery provider and HMRC where you instruct a submission.

We never sell personal data or share it with advertisers.

Account and accounting data: for the life of your subscription plus 90 days, unless a longer statutory retention period applies.

Support correspondence: 24 months. Security logs: 12 months.

You can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Email privacy@accukash.com and we will respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk.