Privacy Policy

For information about our own customers — the account holder, billing contact and Authorised Users — Liqod acts as a controller. For the bank statements, ledgers and client financial records you upload into a company workspace, you are the controller and Liqod acts as a processor, handling that data only on your instructions and as needed to provide the Service. Accounting firms requiring a Data Processing Agreement may request one at privacy@liqod.com.

2.1 Information you provide directly.

• Account information: name, email address, password credentials, firm or workspace name, and role.
• Company profile information: legal entity name, entity type, industry, EIN or tax identifier, business address, phone number, currency and fiscal year settings.
• Billing information: plan selected, subscription and purchase history, and the billing contact details you enter at checkout. Full payment card numbers are collected and stored by our payment processor, not by us.
• Support and contact submissions: the content of support tickets, contact-form enquiries and attachments you send us.

2.2 Customer Data you upload.

• Bank and credit card statement documents (PDF, CSV, Excel), including cheque and receipt images contained in them.
• Extracted transaction records: dates, descriptions, merchant and payee names, customer names, amounts, running balances, cheque numbers and memos.
• Accounting records you create: chart of accounts, journal entries, invoices, bills, payments, credit memos, reconciliations and generated reports.
• Client contact details you record for invoicing or transaction queries, including names, email addresses, phone numbers and mailing addresses.

2.3 Information collected automatically.

• Log and device data: IP address, browser and device type, pages viewed, timestamps and referring URLs.
• Usage and audit data: feature usage, statement processing events, and an audit trail of actions taken on records within your workspace.
• Cookies and similar technologies used for authentication, session management, security and aggregate product analytics.

• To provide, operate and maintain the Service, including extracting and categorising statement data and generating reports;
• To authenticate users, enforce workspace and per-company access boundaries, and protect against fraud, abuse and unauthorised access;
• To administer subscriptions, meter per-company plan allowances, process payments and issue billing notices;
• To provide customer support and respond to your enquiries;
• To send service and transactional communications, including invoices you send to your customers and transaction queries you send to your clients;
• To monitor, troubleshoot, and improve reliability, accuracy and performance of the Service;
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Where the GDPR or similar law applies, we rely on: performance of a contract (providing the Service you subscribed to); legitimate interests (securing the Service, preventing abuse, improving reliability); consent (optional communications and non-essential cookies, where required); and compliance with legal obligations (tax, accounting and lawful requests).

We share information with a limited set of vendors who process it on our behalf under contract, only for the purposes described below:

• Base44 — application hosting, database, file storage and authentication infrastructure for the Service.
• DocuPipe — automated extraction of transaction, cheque and receipt data from the bank and credit card statement documents you upload.
• Wix Payments — hosted checkout, subscription billing and payment processing. Card details are entered on the processor’s hosted page and are handled by the processor.
• Resend — delivery of transactional email, including invoices you send to your customers, transaction queries to your clients, and account and support notifications.

We may also disclose information to professional advisers, to a successor entity in connection with a merger, acquisition or sale of assets, and to authorities where required by law, subpoena, or to protect the rights, property or safety of Liqod, our customers or the public. We conduct diligence on subprocessors and require confidentiality and security commitments from them. A current subprocessor list is available on request at privacy@liqod.com.

We and our subprocessors may process information in countries other than your own, including the United States. Where personal data is transferred out of the EEA, the United Kingdom or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses together with technical measures including encryption in transit and at rest.

• Customer Data is retained for as long as your account is active, so that your books and reporting history remain available to you.
• After termination or cancellation, Customer Data is retained for a limited wind-down period during which you may request an export, and is then deleted or irreversibly anonymised, except where longer retention is required by law.
• Backups follow a rolling retention schedule and are overwritten on a defined cycle.
• Billing records, audit logs and records required for tax, accounting or legal-defence purposes are retained for the period required by applicable law.

We apply technical and organisational measures appropriate to the sensitivity of financial data, including encryption in transit and at rest, per-company access isolation, least-privilege administrative access, multi-factor authentication, audit logging and regular backups. These measures are described in our Security Safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a decision we make about your request. California residents may exercise rights under the CCPA/CPRA, including the right to know, delete, correct, and to be free from discrimination for exercising those rights.

• Account and profile data can be viewed and updated in your account settings at any time.
• To exercise a right, contact privacy@liqod.com. We will verify your request and respond within the period required by applicable law.
• If your data was uploaded into a workspace controlled by an accounting firm or bookkeeper, we will refer your request to that customer as controller and assist them in responding.
• You may lodge a complaint with your local supervisory authority.

We use strictly necessary cookies for authentication, session integrity and security, and limited analytics cookies to understand aggregate product usage. You can control cookies through your browser settings; disabling strictly necessary cookies will prevent you from signing in.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@liqod.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised “Last updated” date and, where required by law, notified to you directly.

Privacy enquiries and data-subject requests: privacy@liqod.com. General support: support@liqod.com.