Your data, and your rights over it.

FiledByMe is a bookkeeping and tax-filing tool operated by VeilHex Ltd, a company registered in the United Kingdom. For the personal data described here, VeilHex Ltd is the data controller. You can reach our data protection contact at privacy@filedbyme.com.

Depending on how you use FiledByMe, this can include:

• Account details — your name and email address.
• Your business records — transactions, categories, receipts and documents you add.
• Tax identifiers you choose to provide — such as your National Insurance number or a business reference — used only to prepare and submit filings you ask us to make.
• Payment details — handled by Stripe, our payment processor. We do not store your card number.
• Basic technical data needed to run the service securely (for example, sign-in and audit records).

We never ask for your online banking login. Bank data only enters FiledByMe as CSV files you choose to upload yourself.

We use your data to provide the service: to store and categorise your records, prepare your tax figures, and — only when you instruct it — submit filings to HMRC on your behalf. You authorise any HMRC submission yourself, under your own Government Gateway sign-in; we act as the software you direct, not as your tax agent. We also use your data to keep the service secure, to take payment, and to meet our own legal obligations.

We use a small number of trusted providers to run FiledByMe:

• Supabase — hosts your account, records and receipt files, with access controls and encryption at rest.
• Stripe — processes subscription payments.
• HMRC — receives the filings you choose to submit.
• Vercel — hosts and serves the application.

We do not sell your data, and we do not share it for advertising.

Your records and receipts are held in private, access-controlled storage with row-level security and encryption at rest. We keep your data for as long as you have an account, and for as long afterwards as we are required to — tax records often need to be retained for several years. You can ask us to delete your account and data at any time, subject to those retention duties.

Under UK data protection law you have rights to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these, email privacy@filedbyme.com. We will respond within the time limits the law sets, normally within one month.

If you are unhappy with how we have handled your personal data, you have the right to complain directly to us. We want to hear it and put it right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO). We'd ask you to raise it with us first so we can try to resolve it, but you can go to the ICO at any time: ico.org.uk/make-a-complaint or by calling their helpline on 0303 123 1113.

We may update this notice as the service changes or the law develops. We will revise the date at the top when we do.