Straightforward about personal information.

1. Roles and scope

For account access, product security, support, subscription administration, and product feedback, Duesaro decides the purpose and means of processing and acts as controller. For customer, supplier, invoice, and payment information you add to your workspace, you normally decide why it is used; you remain responsible for that information and Duesaro processes it to provide the service.

Do not add personal information unless you have a lawful reason to use it. Business contact information can still be personal information, especially for sole traders and named contacts.

2. Information we use

This can include account identifiers and email address, authentication events, workspace records you choose to add, billing subscription identifiers and status, support or feedback messages, device/browser information needed for security, and local preferences such as installed-app or notification choices.

Payment card and bank credentials are collected and stored by Revolut during secure checkout. Duesaro stores only the provider identifiers, plan choice, trial/access state, and operational billing events needed to run the subscription.

3. Why we use it and legal bases

We use account and workspace information to provide the service you request, authenticate access, save your workspace, create on-demand documents, provide support, prevent misuse, and administer subscriptions. These uses are generally necessary to perform our contract with you or to take steps you ask for before entering one.

We also use limited technical and security data for legitimate interests in keeping Duesaro reliable, preventing fraud or abuse, improving the service, and defending legal claims. Where consent is required, such as browser notification permission, you can decline or withdraw it in browser settings.

4. Sharing and processors

We use specialist providers to operate parts of Duesaro, including hosting, authentication, database/storage, email delivery where enabled, and Revolut for checkout and recurring payments. They may process information only as needed to provide their service or meet their own legal obligations.

We do not sell personal information. We may disclose information where required by law, to protect rights or safety, or during a genuine business reorganisation, subject to appropriate safeguards.

5. Retention, security, and deletion

We keep account and workspace information while your account is active and for a reasonable period afterwards for recovery, legal, tax, fraud-prevention, and dispute purposes. You should export or retain records you are legally required to keep before asking for deletion.

We use access controls, service-side security, and private storage where configured. No online system can promise absolute security, so please keep sign-in links and passkeys private and tell us promptly about suspected account misuse.

6. Your rights and contact

Depending on applicable law, you may have rights to be informed, access, correct, erase, restrict, object, and receive portable copies of certain information. To make a request, use the Contact page from the email address associated with your account and state what you need. You may also have the right to complain to the Information Commissioner’s Office in the UK.

This notice cannot replace a data-processing agreement for a customer that needs one. Contact us before placing regulated, special-category, or unusually sensitive data in Duesaro.

7. Browser storage and alerts

Duesaro uses essential cookies or local storage for sign-in, workspace continuity, preferences, tutorials, and the installed web app. Browser alerts are optional: permission is requested from the app, a quiet daily alert is used only while the app is open, and you can change the choice in browser or Duesaro settings.