Privacy notice

Contact and identity details for the people we deal with at a client, including name, role, email address and telephone number.

Financial records needed to deliver the engagement: bank and card transactions, ledgers, payroll summaries, invoices and returns.

Service data generated when you use AscenAi, such as sign-in events, posting actions and audit trail entries.

To deliver the engagement you have appointed us for, to meet our own legal and regulatory obligations, and to secure and support the platform.

We do not sell personal data and we do not use client financial records for advertising.

Client books are hosted in managed cloud infrastructure in the United States, encrypted in transit and at rest, with row level access rules that isolate each client group.

Access is limited to the engagement team and platform administrators, and every privileged action is written to an audit log.

We use a small set of vetted providers: cloud hosting and managed database, bank data aggregation for account connectivity, email delivery, and a payment processor for subscription billing. Card details are handled by the payment processor and never stored on our systems.

Accounting and tax records are retained for the period required by the relevant jurisdiction, generally seven years. Platform logs are retained for twelve months. When an engagement ends we return or delete data on request, subject to those statutory retention periods.

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where no statutory retention rule applies. We respond within 30 days.

Suspected incidents can be reported to security@ascenai.io. We acknowledge reports within one business day and notify affected clients without undue delay once an incident is confirmed.