Privacy policy
Effective 2026-11-11. This policy explains what Tenhatch ("we") does with personal data and business records when you use PeriodGuard (https://periodguard.com). Questions: support@tenhatch.com.
Where the data comes from
When you connect a business, you sign in to Xero and choose the organisations PeriodGuard may read. PeriodGuard asks Xero for read-only access to: invoices, bills and credit notes; payments, overpayments and prepayments; bank transactions and transfers; manual journals; contacts; and the organisation's settings (its name, lock dates and chart of accounts). It also receives the name and email address of the person who signed in to Xero. It never asks for permission to change anything in Xero.
What we collect and keep
| Data | Why | Kept |
|---|---|---|
| Email address and sign-in metadata | To create your account and sign you in | While the account exists |
| The Xero sign-in's tokens | To read the organisations you chose; encrypted (AES-256-GCM) before they are stored | Until you disconnect, or until Xero no longer accepts them |
| Each version of the covered records, as Xero returns them (without attachments), and the changes found between versions | The change history, closed-period alerts and reports you asked for | Paid plans: while the business stays connected. Free plan: 30 days. Always deleted when you disconnect the business |
| Who made a change and when, from Xero's history of each record | To show who made each change | With the change |
| Alert email addresses you add and the alerts sent | To send the alerts you asked for | While the business stays connected |
| Billing details (name, country, last 4 digits of the card) | Processed by our payment provider to charge you; we never see full card numbers | 7 years (tax law) |
| Usage records (API and agent queries: when, through which door) | To meter your plan and bill pay-as-you-go use | 13 months |
| Support messages | To answer you | 2 years |
| Technical logs (IP address, user agent, request ids; never record contents or tokens) | Security, abuse prevention, debugging | 30 days |
| Email address you give the early-access form before PeriodGuard opens, and the date | To email you when it opens, and more only if you ask | Until you unsubscribe or ask us to delete it |
What we never do
- We never sell your data, share it with anyone you did not choose, or combine it with other customers' data.
- We never use your data, or anything read from Xero, to train, fine-tune or improve any AI model.
- Your business records are never sent to the support assistant or to analytics. The support assistant sees only our documentation and the question you type.
- Alerts go only to the addresses you add for that business.
When a business is disconnected
- You disconnect it in PeriodGuard: we remove the connection in Xero and delete everything we stored about that business at once: every version, every change and the alert log.
- Access is removed in Xero, or expires: we stop reading it at once, email you, and delete everything we stored about it 30 days later unless you connect it again. Until then you can download its history as CSV.
Processors
We rely on a small number of service providers who process data on our behalf: authentication and database hosting (Supabase; the early-access list is stored by the Tenhatch studio's own database, also at Supabase), payments (Stripe), transactional email such as sign-in links and alerts (Resend), the support assistant (Anthropic, which receives only your question and our documentation), product analytics on our own pages (PostHog, which receives no business records) and hosting (Vercel). Each receives only the data needed for its job.
Security
Xero tokens are encrypted before they are stored and the key is kept apart from the database. Access to stored data is limited to the server. If we learn of a security incident affecting your data, we tell you and Xero without delay, and Xero within 24 hours.
Cookies
We use strictly necessary cookies for sign-in sessions and for the few minutes of the sign-in with Xero. There are no advertising cookies and no third-party tracking cookies.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Email support@tenhatch.com and we will respond within 30 days. You can download any business's history as CSV and delete it by disconnecting the business.
International transfers
Our providers may process data outside your country. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.
Changes
We will announce material changes to this policy by email or in the application before they take effect.
Tenhatch, 26500 W Agoura Rd, Ste 102 #549, Calabasas, CA 91302, United States