Privacy Policy
How Pudding collects, uses, discloses, and stores your personal and financial information.
1. Who we are
Pudding is an AI-native accounting and finance product that connects to your Xero organisation (and, where you choose, other sources) to help you reconcile, close, and report. This policy explains how we handle your information under the Australian Privacy Principles (APPs).
This document is a DRAFT placeholder and is not yet legally reviewed. It is published so the consent and disclosure mechanism is in place; the binding text will replace it after counsel review and the version will be bumped.
2. Information we collect
Account information you provide (name, work email, password hash, MFA settings). Financial and operational data we retrieve on your behalf from connected systems such as Xero (ledger entries, invoices, bills, bank transactions, contacts, payroll where enabled). Usage and device information needed to operate and secure the service.
PLACEHOLDER — counsel to confirm the full, accurate inventory of data categories, including any sensitive information and payroll data.
3. How we use your information
To provide the service you have asked for: syncing, categorising, reconciling, and reporting on your financial data; to secure your account; to provide support; and to meet our legal obligations.
AI-assisted features process your data to produce suggestions and drafts. PLACEHOLDER — counsel to describe any model providers, whether data is used for training (it is not, by default), and data-residency.
4. Disclosure
We disclose information to the sub-processors needed to run the service (for example, our cloud database and hosting providers) under contract. We do not sell your personal information.
PLACEHOLDER — counsel to list named sub-processors and any overseas disclosure recipients and their locations.
5. Storage, security, and retention
Data is stored in Australia (Sydney region). Access tokens are encrypted at rest. We retain your data while your account is active and for a limited period afterwards, then delete or de-identify it.
PLACEHOLDER — counsel to confirm exact retention periods and the deletion / erasure pathway available to you.
6. Your rights and contact
You can request access to, or correction of, your personal information, and you can ask us to delete your account data. To make a request or raise a privacy concern, contact us at the address below.
PLACEHOLDER — counsel/founder to insert the privacy contact email and the complaints / OAIC escalation pathway.