Privacy Policy

AVERQIS LTD (“we”, “us”, “our”) operates AVERQIS, accounting and business software for the United Kingdom. We are registered in England and Wales under company number 17413169, with our registered office at Cumberland House, 80 Scrubs Lane, London, NW10 6RF, United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of personal data processed through this platform. Our Information Commissioner's Office (ICO) registration number is [ICO REGISTRATION NO.].

You can contact us about anything in this policy at [email protected].

Account data: your name, email address, password (stored only as a cryptographic hash), multi-factor authentication details, and the name of your practice or business.

Workspace data: the clients, businesses, employees, calculations and documents you enter into the platform. This data belongs to your workspace; we process it on your instructions.

Usage data: technical logs such as IP address, browser type, pages visited and actions taken, collected to operate, secure and improve the service.

Billing data: subscription status and payment references handled by our payment processor, Stripe. We never store full card numbers on our systems.

To provide the service you signed up for — creating workspaces, running calculations, storing records and processing documents (performance of a contract).

To keep the platform secure — authentication, fraud prevention, abuse monitoring and audit logging (legitimate interests and legal obligations).

To communicate service updates and security notices and, where you have opted in, product news (consent).

To comply with UK law, including tax and accounting obligations (legal obligation).

Platform data is hosted on secure, access-controlled servers operated by our hosting provider, with data encrypted in transit (TLS) and at rest. Document uploads are stored in encrypted object storage (Cloudflare R2) with access restricted to your workspace.

Tenant isolation ensures one customer's workspace can never read another's records.

We share personal data only with the processors necessary to run the service:

• Hosting — Hostinger (server infrastructure)
• Payments — Stripe (subscription billing)
• Email delivery — Hostinger Business Email
• Document processing (OCR) — Microsoft Azure Document Intelligence
• Object storage — Cloudflare R2 (documents and exports)

Each processor acts only on our documented instructions. We do not sell personal data, and we do not use your workspace data to advertise to anyone. We may disclose data where required by law or a valid order of a UK court or authority.

Account data is retained while your account is active. If you close your account we delete or anonymise workspace data within 90 days, except where we must retain records to meet legal, accounting or dispute-resolution obligations.

Server logs are kept for up to 12 months for security purposes.

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; erase data in certain circumstances; restrict or object to processing; obtain a portable copy; and withdraw consent at any time where consent is our basis for processing.

To exercise any right, email [email protected]. We respond within one month. If you are unhappy with our response you may complain to the ICO at ico.org.uk.

We apply industry-standard safeguards: encryption in transit and at rest, hashed passwords, mandatory two-step verification for administrative roles, least-privilege access controls, and an append-only audit log of privileged actions. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the ICO as required by law.

We use essential cookies to keep you signed in and to remember your consent choices, plus optional analytics cookies only if you opt in. See our Cookie Policy and Cookie Settings.

We may update this policy as the service evolves. Material changes will be announced in-app or by email at least 14 days before they take effect.