Privacy policy
Accnomos · Zaytuna Business Services Ltd · last updated 29 October 2026
The short version
Accnomos keeps your books in your own Microsoft OneDrive. We do not run a user database and we do not store your receipts, invoices, ledger or VAT figures on our servers. Unless you choose otherwise, the AI that reads your documents is the one on our server: Meta's Model API, then a fallback model on our own server. You can instead run it on a machine you control or use your own API key (see where your documents go). The one exception is the waiting list, which holds only what you type into it if you choose to sign up.
What the app accesses
- Microsoft account (sign-in): your name and e-mail, used only to show who is signed in.
- OneDrive app folder: the app reads and writes files inside its own Accnomos folder (inbox, ledger events, Books.xlsx, VAT returns). It does not read the rest of your drive.
- Sending invoices (Outlook, optional): the first time you send an invoice or a payment reminder, the app asks Microsoft for permission to send mail as you (
Mail.Send). It sends only the email you saw and confirmed, to the address you confirmed, with the invoice PDF attached; a copy is in your Sent Items and the PDF in your Accnomos folder. Reminder wording is drafted by your own AI connection from the invoice number, amount and dates; your bank details are not sent to the AI. - Camera / photos (Android): only when you choose to capture or pick a receipt; the image is uploaded to your OneDrive inbox.
- Your AI connection (optional): by default none: our server's own AI chain is used (see below). If you choose it, either the address of a model running on your own hardware (e.g. Muse Glimmer), or a Meta Model API key you paste in. The key is stored on your device and sent only to our stateless runtime over HTTPS to make the request on your behalf; it is never logged or stored server-side.
- HMRC (sandbox during the hackathon): if you connect HMRC, the OAuth tokens stay in your browser session. Our relay holds only the HMRC application secret and forwards requests; it stores nothing about you. HMRC requires fraud-prevention headers (device, screen size, time zone, IP address) which the relay forwards with each request.
Where your documents go for AI reading
The AI reads a document, or a question you ask, only when you ask it to. Where that request is processed depends on your AI choice in Settings.
- Default (you have made no AI choice): our live server's chain. The request goes first to Meta's Model API using the server owner's key; if that cannot answer, to a fallback model running on our own server. We do not keep the request; Meta's own retention is described in its terms and, in Contributor mode, above.
- Contributor mode: our live server uses Muse Spark 1.3 in Contributor mode for the demo and testing. In Contributor mode Meta may use the content sent to it to improve its models. The demo uses only fictional sample data; anyone trying it with their own books is served the same way, so please test with documents you are happy to share. Before real customers use it, the server switches to standard mode.
- Local mode (your choice): the document goes to the model address you give, on hardware you control, and to nobody else. The one exception is spoken questions: the audio is transcribed with Meta's Model API using the server's key, in every mode.
- Your own key (your choice): the document goes to Meta's Model API under your key, in standard mode, subject to Meta's terms for that key. It does not use the server owner's key.
- Optional extra provider: a hosted inference provider may be added to the server's chain as an optional extra provider; it is not used today and this page will be updated if that changes.
Spoken questions are converted to text and the audio is not kept.
Permissions: what is asked and when
The app asks for each permission only when you first use the feature that needs it, never all at once.
| Permission | Asked | Used for |
|---|---|---|
User.Read, offline_access | At sign-in | Show who is signed in; keep you signed in |
Files.ReadWrite.AppFolder | At sign-in (personal accounts) | Read and write only the Apps/Accnomos folder: 00 Inbox to 07 Reports, Books.xlsx, _System |
Files.ReadWrite | At sign-in (work accounts only) | Read and write only the /Accnomos folder; the app folder is personal-accounts only |
Mail.Read | When you switch on Outlook intake or inbox triage, or open Import contacts › People who email you | Intake copies likely bills to 00 Inbox; triage reads sender, subject, date and a short preview; Import contacts lists who emailed you (names and addresses only) |
Mail.ReadWrite | The first time you tap Draft in Outlook | Save that one reply as a draft; nothing is ever sent |
Mail.Send | The first time you send an invoice or reminder, in the confirmation dialog | Send only the email you saw and confirmed, with the invoice PDF |
Contacts.Read | The first time you open Import contacts › Outlook contacts | List your Outlook contacts so you can tick which to add; ones already in your books only gain a missing email or phone |
Calendars.Read | The first time you plan a day or open Calendar | Read your default calendar for those days, to plan around it or list it |
Calendars.ReadWrite | The first time you apply a plan, add or remove an event, or tap Add to calendar on your deadlines | Create the plan’s items, the events you add, and your deadlines as all-day events with a reminder; each event Accnomos writes carries a hidden Accnomos tag, so it only ever updates or removes its own |
What we keep
Nothing from your books. The runtime and relay are stateless: requests are processed in memory and discarded. Standard web-server access logs (IP address, path, time) are kept for up to 30 days for security. If you join the waiting list, we keep what you typed into that form, as described next.
The waiting list
You can leave your email on our website to join the Accnomos waiting list. Signing up is optional and has nothing to do with using the app.
- Who: Zaytuna Business Services Ltd, United Kingdom, is the controller of the list. Contact zohaibsharif@gmail.com.
- What we collect: your email address; your name and how you heard about us, if you give them; what the books would be for (limited company, sole trader, personal, or accountant/bookkeeper); that you ticked the consent box and its exact wording; the page you signed up on; and the date and time. We do not store your IP address with it.
- Why: to email you when your place on the waiting list comes up, and to know how many people of each kind have signed up. Nothing else: no newsletter, no other products, and we never sell or share the list.
- Lawful basis: your consent (UK GDPR Article 6(1)(a)), given by ticking the box, which is never pre-ticked. Our email also follows the Privacy and Electronic Communications Regulations.
- Where it is kept: in one file on a server we run ourselves, readable only by the service operator. Nobody else receives it. If we use an email-sending service to email you, we will name it here first; it would act only on our instructions.
- How long: we delete the list by the end of November 2027, except for people who have become customers. Unsubscribing deletes your entry straight away.
- Unsubscribe or erase: reply to our email, or email zohaibsharif@gmail.com from the address you signed up with. Withdrawing consent is as easy as giving it, and we will delete your entry and confirm. You can also ask for a copy of what we hold, or for it to be corrected.
- Complaints: if you are unhappy with how we handle your data, tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
No decisions are made about you automatically, and you do not have to sign up to use Accnomos.
Data map
| Data | Where it lives | Who can see it |
|---|---|---|
| 00 Inbox, 01 Receipts, 02 Needs a look, 03 Sales (with invoices/ and invoices/sent/), 04 Bank statements, 05 Payroll, 06 VAT returns, 07 Reports, Books.xlsx, README.txt | Your OneDrive Accnomos folder (Apps/Accnomos; /Accnomos on work accounts) | You — plus anyone you share that OneDrive with |
| The books: _System/Ledger/events, proposals, docs, audit trail, Autopilot rules | Your OneDrive Accnomos folder, _System/ | You — append-only; corrections are new reversing entries |
| Working data: Contacts, Jobs, Staff, Timesheets, Vehicles, Mileage, bank, Intake, Todos, Planner, Payroll runs, Invoicing profile | Your OneDrive Accnomos folder, _System/ | You — names and details only; money is recomputed from the events |
| Microsoft sign-in (name, e-mail) | This browser's sign-in cache | You, shown as who is signed in |
| Documents and questions sent to the AI (default: no AI choice made) | Sent per request over HTTPS to Meta's Model API with the server owner's key, then, if needed, to a fallback model on our own server; not stored by us | Meta (Contributor mode on our live server: it may use the content to improve its models); nobody else |
| Your Meta API key and AI address | This device only | Sent per request over HTTPS so the runtime can call the model for you; never logged or stored |
| HMRC tokens | This browser tab only | Gone when the tab closes or you disconnect |
| Device ID and VAT number | This device only | Sent to HMRC as fraud-prevention data when you submit |
| Spoken questions | Nowhere — converted then discarded | Nobody keeps the audio |
| Questions typed into Ask about Accnomos (the website chat) | Nowhere — answered by our own model from the team's notes, then discarded; not logged | Nobody; it never sees anyone's books |
| Mail read during intake and triage | Memory only; copies land in 00 Inbox and to-dos in _System/Todos | You — full bodies and attachments are never fetched by triage |
| Calendar days read for planning | Memory only; applied plans in _System/Planner/applied.json | You — nothing written before you tap Apply |
| Server access logs (IP, path, time, up to 30 days) | Our hosts | The service operator, for security |
| waiting list (only if you sign up): email, optional name, business type, how you heard, consent, time | One file on our server (the runtime’s data volume) | The service operator, to email you when your place on the waiting list comes up; deleted by the end of November 2027 |
Third parties
- Microsoft (sign-in and OneDrive) — under your Microsoft account terms.
- Meta Model API — the default for AI reading on our live server (server owner's key, Contributor mode for the demo and testing: Meta may use the content sent to it to improve its models), and with your own key if you provide one, under Meta's terms for that key. It receives the document or question being read. Not used in local mode.
- Our own server — runs the fallback model if Meta's Model API cannot answer, and receives the same content; it is not kept.
- Our web host (IONOS, the server that terminates HTTPS for accnomos.com and api.accnomos.com) — carries your requests, including document content, over an encrypted tunnel to our own server; it is a processor for that transport only.
- TrueLayer — only if you connect a bank for bank feeds; it receives your bank sign-in choice and consent, and returns account and transaction data, which we write to your OneDrive.
- Stripe and PayPal — only if you connect either for payment links on invoices; they receive the invoice amount, reference and description needed to create the link, and tell us when it is paid.
- A hosted inference provider chosen by the server owner — only if you use your own key and the server owner has switched on the Muse Spark Open verifier; the document image is then sent there for an independent second reading. In local mode documents are never sent there.
- HM Revenue & Customs — only if you connect HMRC.
We do not sell data and we do not use advertising or analytics SDKs. The waiting list is not shared with anyone.
Your data: export and leaving
Export. Settings → Your data → Export your data saves everything as one zip in 07 Reports/Exports in your OneDrive (accnomos-export-<date>.zip): ledger events, proposals, contacts, invoices with an index of the invoice PDFs, payments, bank lines, rules, the audit trail and the saved VAT returns — plus a README explaining each file and one CSV per main table (ledger lines, contacts, invoices, payments) so it opens in Excel. A second export the same day is kept beside the first, never overwritten.
Where things live. Your books live in your OneDrive, in the Accnomos app folder. This browser keeps your sign-in, AI choice and settings in its own localStorage (HMRC tokens live only in the tab). The runtime keeps nothing: it works on your OneDrive with the token each request carries and discards everything. There is no Accnomos user database.
Leaving. Disconnect clears this browser's sign-in and settings; your files stay in your OneDrive. To delete the books, delete the Accnomos folder in your OneDrive and remove Accnomos at account.live.com/myapps. No server-side delete is needed, because nothing from your books is stored server-side (the waiting list is separate) .
Deleting your data
Delete the Accnomos folder in your OneDrive and sign out of the app. Because we hold no copy, that removes everything. There is no server-side copy of your books to delete.
Contact
Zaytuna Business Services Ltd, United Kingdom · zohaibsharif@gmail.com