Privacy Policy

1. Who we are

TerryBot is a web application and Android app that helps UK sole traders and tradesmen manage invoices, expenses, and tax estimates. TerryBot is operated by Som Season ("we", "us", "our").

If you have any questions about this Privacy Policy, please contact us at privacy@terrybot.co.uk.

2. What data we collect

TerryBot collects only the information you choose to provide. This includes:

• Account information — your name, email address, and password when you create an account
• Business profile — your business name, phone number, address, and VAT number (if applicable)
• Invoice data — customer names, addresses, email addresses, job descriptions, and amounts
• Expense data — descriptions, amounts, dates, and categories
• Payment information — processed securely by Stripe; we never store your card details
• Device information — basic technical data (browser type, device type) for app performance
• Usage data — how you use the app, to help us improve it

3. How we use your data

We use your data to:

• Provide and operate the TerryBot service
• Generate your invoices and expense reports
• Calculate your estimated tax liability
• Process your subscription payments via Stripe
• Send you important service updates and notifications
• Improve and develop new features for TerryBot
• Comply with our legal obligations

We will never sell your data to third parties or use it for advertising purposes.

4. Legal basis for processing (UK GDPR)

Under UK GDPR, we process your personal data on the following lawful bases:

• Contract performance — to provide the TerryBot service you have signed up for
• Legitimate interests — to improve our service and ensure security
• Legal obligation — where required by law
• Consent — for marketing communications (you can withdraw at any time)

5. Data storage and security

Your data is stored securely on servers located within the United Kingdom and European Economic Area. We use industry-standard encryption (TLS/SSL) for all data in transit.

Currently, invoice and expense data is stored locally on your device using your browser's localStorage. When cloud sync is enabled, your data is encrypted before being stored on our servers.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no system is 100% secure and we cannot guarantee absolute security.

6. Data retention

We retain your personal data for as long as your account is active, or as long as needed to provide our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, financial records for tax purposes — typically 6 years under HMRC rules).

7. Sharing your data

We only share your data with trusted third parties who help us operate TerryBot:

• Stripe — payment processing (their privacy policy applies to payment data)
• Vercel — website hosting and delivery
• Google — if you use Google Sign-In (optional)

All third-party providers are contractually required to keep your data confidential and to process it only as instructed by us.

We may disclose your data if required by law, court order, or to protect the rights, property, or safety of TerryBot, our users, or the public.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request that we delete your data ("right to be forgotten")
• Right to restriction — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, email us at privacy@terrybot.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Cookies

TerryBot uses minimal cookies and local browser storage to keep you logged in and save your preferences. We do not use advertising or tracking cookies. We do not use third-party analytics that track you across other websites.

10. Children's privacy

TerryBot is intended for use by adults (18+) operating as UK sole traders or tradesmen. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice within the app. The date at the top of this page shows when it was last updated. Continued use of TerryBot after changes constitutes acceptance of the updated policy.

12. Contact us