Privacy notice.
Updated 7 November 2026
What Accounts stores
Accounts stores your verified email address, linked Google or Apple account identifier, business details, financial records and business documents you choose to enter, import or generate. Business document inputs, draft wording, action checklists, revisions, approval records and export history are stored privately under your account. Security records include sign-in methods, session expiry, device descriptions and account-security activity. Session tokens and recovery codes are stored as hashes. Authenticator setup secrets and connected-provider credentials are encrypted.
Why this information is used
We use account information to authenticate you and separate your workspace from other users. We process your business records to provide accounting, reconciliation, reporting and features you request. Invoice emails are sent to the recipient you review. An optional daily brief is delivered to your verified account email when enabled.
Service providers and AI
Cloudflare provides application hosting, database storage, email delivery and AI inference. Google and Apple process authentication when you choose their sign-in methods. Accounts requests basic identity and email information, not access to your Google Drive, email inbox or Apple files. If you use Ask Accounts, selected ledger information and your question are processed by Cloudflare Workers AI to generate an answer. Connected financial providers receive the credentials and requests needed for connections you explicitly configure.
Cookies and security
Accounts uses necessary secure cookies for sign-in, temporary authentication verification and OAuth request validation. They are not advertising cookies. Browser sessions expire after seven days and can be revoked from Account security. You can enable authenticator-app two-step verification and save single-use recovery codes.
Optional website analytics
If you choose Allow analytics, Google Analytics measures visits to public pages using analytics cookies. The tag receives the public page address without its query string and the referring site’s origin. Accounts limits the tag to public pages. Use Analytics preferences on those pages to change your choice and remove analytics cookies. How Google uses information from sites that use its services.
Your choices
You can export workspace records, disconnect linked sign-in methods, disable optional financial emails and revoke other device sessions. Business records remain saved to your account until removed through supported controls or an account-deletion request is completed. Security and provider logs may be retained for service operation and investigation.
Contact and requests
For privacy questions, corrections or account-deletion requests, contact obedience@darkpools.co.za from your verified account email. We will verify ownership before disclosing or removing private account records.