Privacy

Who we are

Bookie is provided by KnowAll AI Ltd, a company registered in the United Kingdom (“KnowAll AI”, “we”). For the portal at getbook.ie we are the controller of the account data described below. For the accounting data you view through Bookie, your organisation remains the controller and we act as its processor.

What we process

• Your sign-in details from Microsoft Entra ID: name, work email, user id and organisation (tenant) id. Used to sign you in and to keep each organisation’s data separate.
• Connection settings: which Xero organisations are connected and the tokens needed to reach them. These are encrypted and stored in your own Microsoft 365, not on our servers.
• Accounting data from Xero or Business Central, read live when you open a page or ask Bookie a question. It is shown to you and then discarded. We do not keep a copy.
• Conversations with Bookie the AI bookkeeper, if your organisation uses the agent add-on: your questions, his answers and your stated preferences, kept so he can remember context. Ledger figures are looked up afresh each time rather than stored.
• Technical logs: request times, errors and IP addresses, kept for up to 30 days to keep the service secure and working.

What we do not do

• We do not sell personal data or use it for advertising.
• We do not use tracking or advertising cookies. The only cookies are for sign-in.
• We never use data from Xero or Business Central to train or fine-tune AI models, ours or anyone else’s.

Our legal basis

We process account and log data to provide the service you or your organisation asked for (contract) and to keep it secure (legitimate interests). Accounting data is processed on your organisation’s instructions.

Who else is involved

Bookie runs on Microsoft Azure, connects to Xero and Microsoft Business Central, and uses OpenAI models through Azure OpenAI for Bookie the AI bookkeeper. The full list, with what each one does, is on the security page. Where data leaves the UK or EEA, it is protected by the standard contractual clauses or an adequacy decision.

How long we keep it

Sign-in details last as long as your session. Technical logs are kept for up to 30 days. Connection settings live in your tenant and are removed when you delete them there. Bookie conversation memory is kept until your organisation removes the agent or asks us to delete it.

Your rights

You can ask to see, correct or delete personal data we hold about you, object to how we use it, or ask us to restrict it. If your request is about your organisation’s accounting data, please contact your organisation first, as it controls that data. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Contact

Questions about privacy or a request about your data: contact KnowAll AI through knowall.ai. We will reply within one month.

Changes

If we change this notice we will update the date at the top. Significant changes will be announced in the portal before they take effect.