Privacy

Privacy Policy

Maintaining your privacy is really important to us. You entrust us with sensitive personal and financial information, and we take that responsibility seriously.

  1. Who are we?

AIRPA Research and Development or AIRPA (“we”“us”“our”) is an online business and accounting platform for everyone but it is best suited to small businesses and accountants.

Our Privacy Policy explains how we, as a data controller, collect, store and process personal data when you browse our site www.airpa.ai (the “AIRPA website”), use the AIRPA service/application (“AIRPA”) or otherwise provide personal data to us. Please read this Privacy Policy carefully to understand how we will treat your data, including personal data.

This Privacy Policy should be read with our Terms which, together, apply to your use of both the AIRPA website and AIRPA service.

  1. What information do we collect and receive?

Your personal data

When we say “personal data”, we mean any information that relates to and identifies a living person. Personal data will be contained in the information that you provide to us or that is provided during your interactions with us or our service, or in the information that you authorise a third party to give to us on your behalf.

The financial data that you enter into AIRPA, or that is provided to AIRPA from your bank or other third party software, isn’t part of the “personal data” discussed here, unless it identifies a person. For more information about your financial data, please see the following section.

When it comes to your personal data, we comply in full with our obligations under the General Data Protection Regulation (GDPR) and other applicable data protection legislation.

Information you provide – Your personal data includes the information you provide to us or that you authorise someone else to provide when you:

Examples of this personal data include name, email address, contact number, as well as any correspondence sent by you when you contact us. It could also include your bank account details and bank transaction details (if that information identifies a person). It could also include details in any invoices or receipts that you upload (if they identify a person).

AIRPA has no requirement to collect or process any special categories of personal data, as defined under GDPR and the Data Protection Act 2018, in order to provide the service. In addition, we do not knowingly collect or solicit any personal data from anyone under the age of 16 or knowingly allow such persons to register for AIRPA. AIRPA is not directed at children under the age of 16. In the event that we learn that we have collected personal data from a child under age 16 without verification of parental consent, we will delete that information as quickly as possible.

Your financial data

In addition to your own personal data, we may also hold financial data that you enter into AIRPA in order to make use of our services. Examples of your financial data include your organisation’s invoices, expenses, receipts and bank transactions. You are in control of the financial data subject to our Terms. For example, if you want to give your accountant access to your financial data, you can switch this on in AIRPA. Likewise, you can also stop a feed of data from your bank or remove an accountant’s access at any time.

It is your responsibility to safeguard your login information and control third party account access. Also, you need to make sure you have made suitable disclosures and, where applicable, have obtained any relevant consents or permissions necessary for you to upload the data of others (such as suppliers and clients) to AIRPA and for that data to be used as set out in this policy. If, at any time, you want to prevent third party access to your AIRPA account or stop any transfer of data between your bank and your AIRPA account, please contact support@airpa.ai or talk to your accountant.

Information we collect – We collect information about your usage of our service and website to improve our service, understand trends and enhance and customise content and campaigns. Some of this data may be “personal data”, where it relates to an identifiable person. Here’s the information that we collect and how we use it:

Utilisation of Google User Data

Information others provide to us

We may receive information from other companies or entities (e.g. your bank) when you have authorised that third party to provide information to us. This could, in certain circumstances, include the initial information to enable us to create your account (e.g. your full name, your email address and your business type), as well as your bank transaction data.

  1. What do we use your personal data for?

We collect and use your personal data for a variety of business reasons. However, we need some of the data to enter into and perform our contract with you, maintain the security of our systems and provide you with access to AIRPA. This data includes your contact details and other information requested during the AIRPA setup process. If you fail to provide this data, or refuse to do so, we may be unable to provide our service to you.

All the processing we carry out is underpinned by a set of processing conditions. These are the legal bases under which we have the authority to collect, use and store your personal information. The following is a summary of how these could apply to you within the AIRPA service.

Contractual Necessity

We will process data where it is necessary to enter into a contract with you for the provision of the AIRPA service or to perform our obligations under that contract. Please note that if you do not agree to provide us with certain requested information it may be difficult for the service to operate as intended or at all. Examples include:

Please note – you will retain complete discretion to terminate your account with AIRPA where we/you consider that it does not meet your needs or expectations.

Legal Obligation

When you elect to use the AIRPA service, we are required by law to collect and process certain personal information about you. Please be aware that, should you refuse to provide us with certain mandatory information, it may not be possible for you to access the service. Examples include:

Legitimate Interests

We will process your personal data within AIRPA where it is in our legitimate interests do so, and without prejudicing your interests or fundamental rights and freedoms. Examples include:

  1. Who do we share your information with?

Elective third party access to AIRPA data

Should you choose to use parts of AIRPA that permit the sharing of your personal and/or financial data with third parties (for example, if you choose to give your accountant or your bank access to your data), then your personal and/or financial data will be shared in that way. Such personal or financial data may include, for example, general, financial and transactional data and information from your account such as accounting ledger balances, bank transactions and invoices, bills, expenses and project details. These third parties will use that data in accordance with any permissions and consents you have given us or that you may give to us in the future.

Supplier and third party arrangements

As part of the service, we may need to share your personal information outside AIRPA. There are limited circumstances in which we would do this and we will always have a compelling business reason to do so. Examples of when we will share your information include:

We will always take steps to ensure that the safety and security of your information is maintained. We will implement and maintain technical and organisational measures over each transfer of personal information and mandate that our partners and third parties do the same. No ownership rights to the data will be transferred to any third party, unless otherwise notified.

Transferring information overseas

We will, from time to time, have to transfer your information to third parties or organisations in other countries. This will only happen on the basis that any party to which we pass your information will protect it in the same way that we would and in accordance with applicable laws.

In the event that we transfer information to countries outside of the European Economic Area (which includes countries in the European Union as well as Iceland, Liechtenstein and Norway), we will only do so when:

Additionally, you may grant third party access to your personal or financial data by enabling the AIRPA API for that third party. At all times, this access is controlled by you. AIRPA is not responsible for the privacy practices employed by any third party given access by you to your personal or financial data by the AIRPA API.

  1. How long do we store your data for?

We only store your data for as long as is necessary for the purposes of processing that are set out in this policy. When you cancel your account with AIRPA, you can either delete your data immediately in-app via the delete account function, or we will automatically delete your data after one year. Please see the table below detailing our retention policy for all types of account.

Account TypeRetention Period
Cancelled1 year
Expired Free Trial2 years
Suspended2 years
Disengaged2 years
Non-activated1 year

If you are signed up to marketing communications, cancelling your AIRPA account will not automatically cancel your marketing preferences. If you would like to unsubscribe, please email privacy@airpa.ai, otherwise we will delete your email address from our system after two years of inactivity.

To ensure the integrity of our systems and your data, we utilise various technologies to continually take secure, encrypted backups. All data, including deleted data, remains archived within these backups, which are maintained according to our defined two-year data retention policy, after which they are deleted.

  1. You can export your account data at any time

You can export a copy of your data whenever you like – this will include some elements of your personal data and that of your clients, contacts and suppliers, your financial transactions, invoices, and expenses. We recommend that you use the export functionality to keep a backup of your data. While we regularly back up your data, we can’t restore backups on an individual basis. You can also ask us for a copy of your personal data that we hold – see section 9 below for more information.

  1. You can delete your data at any time

You have the option to delete all of your data at any time, using the delete account option in the settings area of AIRPA. Using this option cancels and deletes your AIRPA account and all associated data.

Deleting your data removes it from our active servers immediately; however, we retain archived database backups for two years, after which they are permanently deleted.

We highly recommend that you export your data before cancelling, since many countries (including the UK) require you to retain your business records going back many years, even if you have finished trading. AIRPA is under no obligation to retain data on your behalf if you are no longer subscribed to the AIRPA service.

If your free trial expires or your account is suspended due to non-payment, your account will be automatically deleted after two years of inactivity. We retain historical details about your payments to AIRPA for accounting purposes because we are required by law to do so.

  1. We don’t store your credit card details

Once your 30-day free trial is over, in some cases, you may need to provide payment details to start your subscription and continue using AIRPA. Where this information is provided, it is passed directly to our payment service provider, GoCardless, via an encrypted link and is never stored on our systems. We handle ongoing billing by passing a token to GoCardless that identifies your account.

  1. What are your rights?
  1. Access to your personal data: You can ask us to confirm if we are processing your personal data and you may request a copy of your personal data by contacting our team at privacy@airpa.ai.
  2. Right to change or withdraw your consent: Where you have given us consent to make use of your personal data for any of the purposes outlined in this policy, you may withdraw that consent by contacting us using the details located in section 13  of this policy. If you wish to change your contact preferences or you no longer wish to be contacted for marketing purposes, please get in touch.
  3. Right to rectification: If you need to update out-of-date or inaccurate information we hold about you, please log on to your AIRPA account and update your information or please get in touch.
  4. Right to erasure: You are free to delete your data at any point, using the delete functionality.
  5. Right to data portability: In certain circumstances you may ask us to provide you with the personal data that we hold about you in a structured, commonly used, machine-readable form, or ask for us to send such personal data to another data controller. You can use the export functionality at any time to export your data in this manner.
  6. Right to object: In certain circumstances you may object to our processing of your personal data. If this is the case, please get in touch
  7. Right to restrict processing: You can ask us to restrict the processing of personal data we hold about you in certain circumstances. If you wish to do so, please get in touch.
  8. Make a complaint: You may make a complaint about our data processing activities to a supervisory authority. In the UK this is the Information Commissioner’s Office (ICO). Further details can be found on their website.
  9. Getting in touch: To make enquiries and/or to exercise any of your rights as outlined in this privacy policy please contact our team at privacy@airpa.ai.
  10. Use of cookies

Cookies are small files saved to your device that track, save and store information about your interactions and usage of our services. The primary purpose for our use of cookies is to allow us to provide a smooth, efficient and personalised experience for our users, both on and off our website, through remembering your preferences, securely storing your password (if requested) and serving you more relevant advertising.

If you want to manage or disable cookies for the AIRPA website or any other site, you can do so by changing your browser settings. Please bear in mind that disabling functional cookies may impair the availability and/or functionality of the AIRPA service. We suggest consulting the “Help” section of your browser which offers guidance for all modern browsers.

  1. Security and data storage

We take security and privacy seriously. We will endeavour to take all reasonable steps to keep your personal and financial data secure once it has been transferred to our systems. We adopt appropriate, industry-standard data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction. For further details of the security measures we have implemented.

Where we utilise third parties to help provide our services, we will always ensure that, as a minimum, the security policies and confidentiality arrangements of those third parties adhere to the same requirements that we impose and expect.

Where we have given you (or where you have chosen) a password that enables you to access certain parts of the AIRPA website or AIRPA itself, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We shall periodically check that the personal data we store for you is accurate. If you would like to update the personal data we hold about you, please log in to your AIRPA account or contact us at privacy@airpa.ai with your request.

Please note that the internet is not a secure medium and although we will do our best to protect your data, we cannot guarantee the security of any data transmitted to AIRPA. Any such transmission is at your own risk.

Consistent with Google’s Limited Use requirements, AIRPA is committed to the following principles in its handling of Google user data:

Compliance Measures

  1. Changes to this Privacy Policy

We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices, so you should review this page periodically. When we change the policy in a material manner we will let you know and will update the ‘last updated’ header at the top of this page.

  1. Getting in touch

If you have any queries relating to this Privacy Policy or AIRPA’s use of your personal or financial data, please contact our Privacy Officer at privacy@airpa.ai . Alternatively, our office address is noted below.

AIRPA Privacy Officer
962 Eastern Avenue, Essex, United Kingdom, IG2 7JD

Please note that phone calls to AIRPA Support may be recorded for monitoring, training and security purposes.