Privacy Policy

1. Introduction

iXBRL Generator ("we", "our", or "us") operates the iXBRL Micro-Entity Accounts Generator service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact:
Email: [email protected]

2. Information We Collect

2.1 Financial Data You Provide

When you use our Service to generate iXBRL accounts, you provide:

• Company information (name, registration number, period end dates)
• Financial data (balance sheet and profit & loss figures)
• Director details (names, signature dates)

Important: We do not store this financial data on our servers. All data entry and processing happens in your browser, and the generated iXBRL document is created on-demand without permanent storage.

2.2 Usage Data (Analytics)

We use Umami Analytics, a privacy-focused analytics service, to understand how visitors use our Service. Umami collects:

• Pages viewed and time spent on pages
• Referral sources (where you came from)
• Device type and browser information
• Country of origin (based on IP address, but IP addresses are not stored)

Umami does NOT:

• Store IP addresses or any personally identifiable information
• Use invasive tracking cookies
• Track you across websites
• Sell or share your data with third parties

Umami is fully compliant with GDPR, CCPA, and PECR regulations. You can opt out of analytics tracking at any time (see Section 7).

2.3 Technical Data

Our web server automatically collects standard technical information including:

• IP address (anonymized and not stored long-term)
• Browser type and version
• Time zone and access times
• Error logs (for debugging purposes only)

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generate iXBRL documents based on your financial data
• Improve the Service: Analyze usage patterns to identify improvements
• Maintain security: Monitor for abuse, fraud, or technical issues
• Comply with legal obligations: Respond to legal requests or prevent illegal activity

We do NOT:

• Store your financial data or generated documents
• Sell your data to third parties
• Use your data for marketing purposes
• Share your information with anyone except as required by law

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Legitimate interests: To provide and improve our Service (Article 6(1)(f))
• Consent: For analytics cookies (you can opt out at any time)
• Legal obligation: To comply with accounting and tax regulations where applicable

5. Data Retention

• Financial data: Not stored (processed in-browser only)
• Generated documents: Deleted immediately after download
• Analytics data: Retained for 24 months in aggregated, anonymized form
• Server logs: Retained for 90 days for security and debugging purposes

6. Your Rights Under UK GDPR

You have the following rights:

• Right of access: Request a copy of the data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for analytics at any time

To exercise any of these rights, contact us at [email protected]. We will respond within one month of your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.

7. Cookies and Tracking

We use minimal cookies to operate our Service. For full details, please see our Cookie Policy.

How to opt out of analytics:

• Enable "Do Not Track" in your browser settings (we honor DNT signals)
• Use browser extensions like uBlock Origin or Privacy Badger
• Contact us at [email protected] to request manual opt-out

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS encryption for all data in transit
• No permanent storage of financial data
• Regular security updates and monitoring
• Access controls and logging

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Third-Party Services

We use the following third-party services:

• Umami Analytics: Privacy-focused analytics (see Section 2.2)

These services have their own privacy policies. We carefully select providers that meet high data protection standards.

10. International Data Transfers

Your data is processed within the United Kingdom. If we transfer data outside the UK, we will ensure appropriate safeguards are in place as required by UK GDPR (adequacy decisions or standard contractual clauses).

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Significant changes will be communicated prominently on our website or via email if we have your contact details.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

iXBRL Generator
Email: [email protected]