Privacy notice

Invoice Evidence Binder reads Xero invoice and bill metadata, canonical PDFs, and attachments only when an authorized user requests an export. It does not edit Xero data.

Storage and processors

OAuth tokens and organisation names are encrypted. Cloudflare Workers, D1, R2, Queues, Durable Objects, and Turnstile process and store the service data. Stripe processes subscription billing. Cazi Media does not store card details.

Retention

Generated ZIPs are retained for 30 days. Session and encrypted connection data remain until disconnection or account deletion. Stripe records follow Stripe and legal retention requirements.

Security

Exports use expiring signed links. Every archive contains a SHA-256 manifest. Public activation is protected by Turnstile and exact rate limits.

Deletion and contact

Deleting the account removes exported ZIPs and encrypted app state. Contact [email protected] for privacy requests. The shared Cazi Media privacy policy and terms also apply.