Privacy policy

Last updated: 10 October 2026

Who operates this service

Sage Accounting Connector is operated by Avolaunch Technologies Ltd, a company registered in England and Wales (14600671). Registered address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. For privacy requests, contact accounts@avolaunch.com.

We act as controller for connector account, security, support and billing administration. When you connect business accounting records, you are responsible for having authority to grant access, including any personal information about customers, suppliers or staff.

What information we process

• Account email, internal account identifiers and a password hash. Your password is not stored as readable text.
• Sage access and refresh tokens, their expiry information and connection status. Sage tokens are encrypted in the connector database.
• Login sessions, OAuth authorisations, security nonces and password-reset token hashes.
• Stripe customer and Checkout references and subscription status. Stripe handles payment-card information; the connector does not receive or store full card details.
• Accounting records retrieved for your requests, including invoices, contacts, payments, receipts, transactions and bank account records. These may contain names, addresses, email addresses and financial information.
• Support messages and technical information needed to troubleshoot or protect the service, such as request times, IP addresses, error messages and delivery identifiers.

How we use information

We use this information to authenticate you, connect the account you authorise, fulfil your read-only accounting requests, check subscription access, manage billing, send recovery emails, provide support and prevent misuse.

For your account and service administration, we rely on performance of our contract with you. We rely on legitimate interests for proportionate security and troubleshooting, and legal obligations for required financial records. Your Sage authorisation permits access to the connected account; you can revoke it through Sage. We do not sell accounting data or use retrieved records for advertising.

Where accounting results go

Records requested through the connector are returned to your connected AI assistant. The connector database does not save invoice, contact or transaction response bodies. Results may remain in your chat history and be processed under the AI provider's terms, privacy policy and your account settings. We do not control that provider's retention or model-training settings.

Service providers and international processing

Sage supplies the authorised accounting data; Railway hosts the connector and its database; Stripe processes subscription payments; Resend sends account emails; and Google Workspace handles support email. Cloudflare Turnstile checks website registration requests for automated abuse and may process browser and network information for that purpose. Your selected AI provider receives requested tool results. Information may also be disclosed where required by law.

These providers may process information outside the UK, and service administration may take place from South Africa. International processing must comply with applicable data-protection requirements. Contact us for information about the locations and safeguards relevant to your account.

Cookies and security

The connector uses essential cookies for sign-in and protection of account forms. Browser login sessions last up to seven days; form cookies last up to ten minutes. The current public pages do not add advertising or analytics trackers. Hosting and service providers may maintain operational logs.

Access controls, encrypted Sage tokens, hashed passwords and short-lived recovery links protect account access. No online service can guarantee absolute security. Never share passwords, tokens or reset links with support.

Retention and account deletion

We retain account and connection data while your connector account remains open, including after subscription cancellation so you can manage billing or reconnect. Cancellation alone is not an account-deletion request.

To request deletion, email us from your registered account address. After verifying ownership, we will delete connector account data under our control within 30 days, including saved Sage connection credentials and login credentials. We retain only records needed for legal obligations or the establishment, exercise or defence of legal claims, for the period that purpose requires.

Support messages, infrastructure logs, backups and provider-held records may have separate retention requirements. Deletion of your connector account does not delete records in Sage, your AI chat history or legally required Stripe billing records. Contact those providers to exercise rights over their independently held data.

Your rights and complaints

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal information and object to certain processing. Contact accounts@avolaunch.com; we may verify your identity before acting. You can also complain to the UK Information Commissioner's Office or the relevant authority in your country.

Changes

We will update this page when our data practices change and provide notice of material changes where required.