1. What we collect
Account details, connected-inbox metadata, and the documents you or your staff send for capture, including invoices, receipts and statements. [Placeholder — replace with reviewed copy.]
2. How we use it
To read, file and post your documents, run your account, protect the service, and send the service emails listed in your notification settings.
3. Your rights under UK GDPR
You can request a copy of your data, ask us to correct it, or ask us to delete it subject to our retention obligations for tax and accounting records.
4. Third parties
We share data only with the processors needed to run Baxter — Stripe, our OCR provider, and the inbox, storage and accounting providers you connect.
5. Retention
Active-account documents and data are held for as long as needed, up to seven years. Activity and security logs are retained for 24 months. Cancelled-account data follows the six-month retention and archive process in the Terms of Service.
6. Contact
Privacy questions: privacy@getbaxter.io.
Registered office: [Address line, City, Postcode] · VAT No. [GB 000 0000 00]
ICO Data Protection Registration No. [ZA000000] · Contact: privacy@getbaxter.io