Privacy Policy

BadaBing ("we", "us") helps businesses record paid supplier invoices in Xero. This policy explains what information we handle and how we keep it safe.

What we collect

• Account details: your name, email address and business name.
• Invoices and receipts you upload or forward to your BadaBing address, including the email text (such as "paid by credit card") and attachments.
• Details read from those invoices: supplier, invoice number, dates, amounts, tax and line items.
• Your Xero connection: the organisation you link and the access keys Xero gives us.
• Basic technical logs needed to run and secure the service.

How we use it

• To read your invoices and create bills, payments or spend money entries in your Xero organisation.
• To show you the status of each document and email you when something needs attention.
• To provide support and keep the service secure.

We do not sell your data, we do not send marketing spam, and we never use your invoices, receipts or financial data to train AI models.

Services we rely on

• Xero — to record entries in your accounts.
• Postmark — to receive forwarded invoices and send status emails.
• An AI document reading service (Anthropic) — to read invoice details. Invoices are processed only to extract information for you.
• Secure cloud hosting and storage for your account and files.

How we protect it

Your data is kept separate from other businesses. Xero access keys are stored securely on our servers and never sent to your browser. Invoice files are kept in private, encrypted cloud storage and only people in your organisation can see them.

Keeping and deleting data

We keep your records while your account is active so you have a full history. You can disconnect Xero at any time in Settings. To delete your account and data, email us and we'll remove it.

Your rights

You can ask to see, correct or delete your personal information at any time.

Contact

Questions? Email support@badabingbadaboom.io.