AccountsAI ("we", "us") is an invoicing and accounts management platform operated by
NodeAI. This policy explains what data we collect when you use
accountsai.nodeai.agency,
and what we do with it. The short version: your business data belongs to you,
we collect only what the service needs to run, and we never sell it.
1. Data you give us
- Account details — your name, email address, phone number and password (stored hashed, never in plain text).
- Business records — the company details, clients, invoices, quotations, payments, documents and proposals you create in the platform. This content is yours; we process it only to provide the service.
- Integration credentials — if you connect your own Stripe, SMTP, Resend or AI provider account, those keys are encrypted at rest and used solely to perform the actions you configure.
- Support conversations — messages you send through the support desk.
2. Data we collect automatically
- Usage analytics — pages visited, the site that referred you, campaign parameters, approximate country (derived from IP address), browser and device type. We run this analytics first-party, on our own servers; we do not load third-party advertising or tracking scripts.
- Security signals — the IP address and browser used at registration and sign-in, kept to detect fraud and abuse.
- Cookies — a session cookie to keep you signed in and a CSRF token to protect forms. No advertising cookies.
3. How we use data
- To provide, maintain and improve the service.
- To send transactional email: verification links, invoices you dispatch, billing reminders and support replies.
- To protect the platform against spam, fraud and abuse.
- To understand, in aggregate, how visitors find and use the product.
We do not sell personal data, and we do not use your business records for advertising or to train AI models.
4. Third parties we rely on
- Stripe — subscription payments to us, and (if you enable it) your clients' payments to you. Card details go directly to Stripe; we never see or store full card numbers.
- Email delivery providers (Resend or the SMTP service you configure) — to deliver the email you send.
- Cloudflare Turnstile — bot protection on the registration form.
- Hosting — our servers are hosted with DigitalOcean.
5. Retention and export
Your records stay available for as long as your account exists, including while a subscription is
paused. You can export invoices and records to PDF or Excel at any time — including after you cancel.
Unverified accounts that are never activated are deleted automatically after a short period.
If you ask us to delete your account, we remove your data within 30 days, except where we are
legally required to retain billing records.
6. Security
Data is isolated per business, credentials and integration keys are encrypted at rest, access inside
a business is role-based and configurable per team member, and connections are encrypted in transit.
No system is perfectly secure; if we become aware of a breach affecting your data we will notify you
without undue delay.
7. Your rights
You can access, correct, export or delete your personal data. Write to
info@nodeai.agency from the
address on your account and we will act on it. Depending on where you live, local law (such as the
GDPR or the UAE PDPL) may grant you further rights; we honour reasonable requests regardless of
jurisdiction.
8. Changes
If we change this policy in a way that matters, we will update the date above and, for significant
changes, notify account owners by email.