Privacy Policy
Last updated: 4 May 2026 — South Africa edition
MyAccountsOn (“we”, “us”) takes your privacy seriously. This policy explains what we collect, why, and how to exercise your rights.
What we collect
- Account info — your name, email, company name, and password hash. We never store passwords in plain text.
- Business data — invoices, bills, payments, customers, and bank transactions you upload or create. This is your data; we hold it only to provide the Service.
- Usage data — request logs (IP, user-agent, timestamp) used to operate and protect the Service.
- Cookies — a session cookie for authentication. We do not use third-party tracking cookies on the marketing site.
Why we collect it
To run the Service, communicate with you about it, secure it against abuse, and meet our legal obligations under the Protection of Personal Information Act (POPIA).
Where it lives
Application servers run on Vercel. Your data lives in an AWS RDS Postgres database in eu-north-1 (Stockholm). We do not transfer your data to third parties for marketing.
Subprocessors
We rely on a small number of trusted services to operate:
- Vercel — application hosting
- Amazon Web Services (RDS, S3) — database, file storage
- Email provider — transactional email delivery (specific provider available on request)
Your rights
You can:
- Access and export your data — every list view in the product has a CSV export.
- Delete your data — close your account from Settings or email privacy@myaccountson.com.
- Correct your data — directly in the product or via support.
- Object to processing — email us and we'll resolve as quickly as we can.
Retention
We keep your data for as long as your account is active. After closure, we keep a minimal record for legal/audit purposes (typically 5 years for accounting records under South Africa law) and delete the rest.
Contact
Questions or rights requests: privacy@myaccountson.com.
This page is a starting point and not legal advice. We'll publish the binding version when we go GA.