Data Processing Agreement
At a glance
Your business is in charge of its records. We handle them only to run TidyAcc for you, keep them protected, and tell you quickly if something goes wrong.
1. Who decides what
Your business decides what personal data goes into TidyAcc and why. We handle it on your behalf, only to provide TidyAcc. Under Singapore’s PDPA, this makes us a data intermediary for those records.
2. What we do with your records
- Store them, show them to the people you invite, and do the calculations.
- Send the emails and documents you ask us to send.
- Back them up every night.
- Read bills with AI — only if your company has switched that on.
3. What we never do
- Sell your data or use it for advertising.
- Use it to train AI models.
- Look at your records without a reason. We only access them when you ask for help, or when we need to fix a problem or protect the service.
4. How we protect it
See our Security page. Everyone who helps run TidyAcc must keep your data confidential.
5. Providers who help us
The providers who help run TidyAcc are listed on our Service Providers page. Where practical, we will give at least 30 days’ notice before adding a new one that handles your records.
6. If something goes wrong
If we find a data breach affecting your records, we will tell you without undue delay, explain what happened and what we are doing about it, and help you with any notices you need to give.
7. When you leave
We keep your data for 30 days after your account closes so you can ask for an export, then delete it. Backup copies are overwritten within about 8 weeks. On request, we will confirm when deletion is done.
Questions? Email admin@tidyacc.com or WhatsApp +65 8571 1832. Please never send passwords or sign-in codes by email or WhatsApp.