Privacy Policy

1. Who we are

NumbersClear is operated by AIORAS TECHNOLOGY LTD (Company No. 16037096), registered at 4th Floor Office, 205 Regent Street, London, England, W1B 4HB ("we", "us", "our"). We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Amazon's Data Protection Policy (DPP).

For questions about this policy, contact us at privacy@numbersclear.ai.

2. What data we collect

We collect the following categories of data:

2.1 Account information

• Name, email address, and password (hashed) when you create an account
• Business name, billing address, and payment details (processed securely via Stripe)

2.2 Connected platform data

When you connect your sales channels and accounting tools, we access:

• Amazon Seller Central: Orders, fees, settlements, FBA inventory levels, advertising campaign metrics, and financial reports via the Amazon Selling Partner API (SP-API)
• Shopify: Orders, products, inventory, and financial data via the Shopify API
• QuickBooks / Xero / Sage: Chart of accounts, journal entries, invoices, and bank transactions via their respective APIs

2.3 Usage data

• Pages visited, features used, session duration, and interaction patterns
• Browser type, operating system, IP address, and device identifiers

2.4 Communications

• Messages you send to our support team
• Responses to surveys or feedback requests

3. How we use your data

We use your data to:

• Provide, maintain, and improve the NumbersClear platform and services
• Reconcile orders, fees, and settlements across your connected sales channels
• Generate P&L reports, cash-flow projections, and audit findings
• Detect discrepancies, unbooked fees, and inventory mismatches
• Process payments and manage subscriptions
• Send service-related communications (sync alerts, billing, product updates)
• Analyse usage patterns to improve our product
• Comply with legal obligations

We do not use your connected platform data (Amazon, Shopify, accounting) for advertising, marketing to third parties, or any purpose unrelated to providing our reconciliation and audit services to you.

4. Amazon Information (SP-API data handling)

We take our obligations under Amazon's Data Protection Policy seriously. Specifically:

• Amazon Selling Partner data is used solely to provide NumbersClear's reconciliation, audit, and reporting services to you
• We do not sell, rent, lease, or share your Amazon data with any third party for their own purposes
• Amazon data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access to Amazon data is restricted to authorised personnel on a need-to-know basis
• Amazon data is retained only for as long as necessary to provide the service, and is deleted within 30 days of account closure or upon your request
• We maintain a formal incident response plan for data breaches and will notify Amazon and affected sellers within 72 hours of discovery
• We do not aggregate or de-identify Amazon data for purposes unrelated to our services

5. Third-party services

We use trusted third-party services to operate NumbersClear:

• Cloudflare: Hosting, CDN, edge compute, database, and security
• Stripe: Payment processing (PCI DSS compliant)
• Amazon SP-API: Seller data retrieval (governed by Amazon DPP)
• Shopify API: Store data retrieval
• Intuit / Xero / Sage: Accounting data retrieval

We do not sell your personal data to third parties.

6. Data security

We implement technical and organisational measures to protect your data:

• All data is encrypted in transit using TLS 1.2 or higher
• Data at rest is encrypted using AES-256
• OAuth 2.0 is used for all platform connections; we never store your platform passwords
• Access controls enforce least-privilege principles
• Regular security reviews and monitoring
• Multi-tenant isolation ensures your data is logically separated from other customers

7. Cookies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences (theme, display settings)
• Analyse how you use our platform (analytics cookies)
• Prevent fraud and ensure security

You can manage cookie preferences in your browser settings. Disabling cookies may affect some platform features.

8. Your rights

Under the UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we limit how we process your data
• Withdraw consent: Where consent is the lawful basis, withdraw it at any time

To exercise any of these rights, email privacy@numbersclear.ai. We will respond within 30 days.

9. Data retention

We retain your data as follows:

• Account data: For as long as your account is active, plus 30 days after closure
• Connected platform data: For as long as the connection is active; deleted within 30 days of disconnection or account closure
• Billing records: As required by tax and accounting law (typically six years)
• Usage analytics: Anonymised after 12 months

You may request earlier deletion of your data at any time by contacting us.

10. International data transfers

Your data is primarily processed on Cloudflare's global edge network. Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR, such as the International Data Transfer Agreement (IDTA) or adequacy regulations.

11. Children's privacy

NumbersClear is a business tool not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "Last updated" date at the top indicates when this policy was most recently revised.

13. Contact

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.