Last updated: October 24, 2026
| Company | What it does for us | What it receives |
|---|---|---|
| DigitalOcean | Runs the servers and storage that hold your account and records. | Everything stored in your account, because it is stored on their servers: your records, encrypted receipts, and encrypted backups. |
| Stripe | Takes payment for Pro and manages the subscription. | Your name and email, and the card details you type on Stripe's own page. We never see your card number. We receive back a customer reference and the subscription's status. |
| Resend | Delivers our emails. | The address each email goes to, and the email itself: sign-in codes, account and billing notices, and support replies. If you have email reports or quarterly reminders turned on, it also carries the income, expense and tax figures printed in them. You can turn those off at any time. |
| Google (Firebase Cloud Messaging) | Delivers push notifications to the Android app. | A device token for your phone and a short notification: a title such as "Support replied" and a generic line such as "Open the app to read the reply". Our automatic notifications never contain your message text, your name or any amounts. |
| Have I Been Pwned (Pwned Passwords) | Checks whether a password you are choosing appears in known data leaks, so we can ask you to pick another. | Only the first five characters of a one-way fingerprint (hash) of the password you typed. Never the password itself and never your email address. The check is made by our server, not your device, so it does not carry your IP address. |
| ipwho.is | Tells us which country a sign-in came from, so we can email you if it looks unusual. | The IP address of the sign-in, and nothing else. Results are cached so a repeat sign-in sends nothing. Addresses that cannot be located (private networks) are never sent. |
These run only after you accept the matching choice in the cookie banner or on the Cookie Policy page. If you decline, nothing is sent to them.
| Company | Choice | What it receives |
|---|---|---|
| Google Analytics | Analytics | The pages you visit, your IP address and a cookie identifier. Never your financial records. |
| Google Ads | Advertising | That a visit led to a sign-up or purchase, with a cookie identifier. Never your financial records. |
| Meta (Facebook pixel) | Advertising | That a visit led to a sign-up or purchase, with a cookie identifier. Never your financial records. |
We do not currently run these. This table says what would be sent if we turn them on.
If you invite an accountant, they can see your records, read-only, until you remove them. That is your decision, not a service we use.
If we add a company that will receive personal data, we add it here and update the Privacy Policy before it starts.
Questions: info@1099assistant.com, or make a privacy request.