Privacy Policy
Privacy Policy
Effective date: 23 March 2026. This Privacy Policy explains how SAPPROUK Limited collects, uses, stores, and shares personal data when business users use the Post to Books website, application, and related support channels.
Who this policy covers
This policy applies to business users visiting the Post to Books website, creating or using a Post to Books account, connecting Stripe or Xero to Post to Books, purchasing subscriptions or one-time services, or contacting Post to Books for support.
Who operates Post to Books
Post to Books is operated by SAPPROUK Limited. Our correspondence address is Cherry Tree Farm, Mill Lane, Brigg, DN20 8NA. If you have privacy questions or want to exercise your data rights, contact us at ask@sapprouk.com.
What data we collect
We collect identity and contact information such as your name, email address, company name, billing details, and support correspondence; product account information such as team membership, connection status, Stripe account identifiers, Xero tenant identifiers, invoice-routing settings, and mapping data; operational telemetry such as login events, audit logs, sync outcomes, error traces, and security events; and website preference information such as cookie-consent choices.
How we use personal data
We use personal data to provide and secure the service, manage sign-in and team access, route invoice activity between connected systems, process subscription and one-time purchases, respond to support requests, send service communications, enforce our terms, maintain records, and understand site performance where optional analytics is enabled and you have consented.
Lawful bases
Where UK GDPR or EU GDPR applies, Post to Books generally relies on contract necessity to provide the service you request, legitimate interests to keep the service secure and operational, legal obligations where records or disclosures are required, and consent for optional cookies or similar technologies.
Third-party processors and systems
Post to Books uses third-party service providers to operate the service. These include Stripe for billing, payments, receipts, and Stripe account connectivity; Xero for accounting integration; and infrastructure, hosting, database, queueing, and email-delivery providers that help us run Post to Books securely and reliably. We may update the providers we use from time to time where operationally necessary.
International transfers
Some of the providers we use may process personal data outside the UK or your local jurisdiction. Where international transfers apply, we use contractual, technical, and organisational safeguards that are appropriate to the destination and the service involved.
Retention
Post to Books keeps account data while an account is active and for up to 12 months after account closure. Support emails and support messages are kept for up to 12 months after the support request closes. Email-verification links expire after 24 hours, and stale unverified sign-up records are deleted after 7 days. Processed webhook records are kept for 30 days, dead-letter webhook records for 90 days, sync logs for 90 days, and resolved mapping issues for 30 days. Billing records and receipts may be retained for 6 years where needed for tax, accounting, audit, and legal compliance.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal data, and to withdraw consent for optional cookies at any time. To exercise these rights, email ask@sapprouk.com.
Security and incident reporting
Post to Books is designed to use encrypted transport, restricted operational access, session-based authentication, audit logging, and monitored background processing. If you need to report a suspected security issue or have questions about our security practices, contact ask@sapprouk.com.
Contact
SAPPROUK Limited, Cherry Tree Farm, Mill Lane, Brigg, DN20 8NA. Email: ask@sapprouk.com.