Sign in

How we handle your data

Version: data-handling-2026-09-29.1
Effective date:

At a glance: VODER reads supported accounting data without changing your records. VODER Actions is a separate, optional Xero service for contact and invoice work. A complete request to create a draft invoice creates it immediately. You confirm each of the other six Actions before it changes your Xero records or emails a customer. Stored connection tokens are encrypted.

Read-only VODER operations

VODER requests read access from Xero and FreshBooks. Intuit grants a broader QuickBooks accounting scope, but VODER limits its QuickBooks operations to reading supported data. VODER does not add, edit or delete accounting records in any of the three services.

Optional VODER Actions for Xero

The Xero organisation owner can choose the complete VODER Actions beta for that organisation. It can create a contact, correct a contact’s name or email, create or correct a draft invoice, approve a draft invoice, email an approved invoice, and email an overdue invoice again. FreshBooks and QuickBooks Online remain read-only. VODER Actions has no additional VODER charge.

If VODER Actions is on for the organisation and your request includes all required invoice details, asking it to create a draft invoice creates the Xero draft immediately. It does not ask for confirmation first. Each of the other six Actions shows exactly what it will change or send and waits for you to confirm in the conversation. Before an invoice is emailed, you see the recipient address. Turning VODER Actions off stops these actions in VODER for that organisation. Xero may still retain the permission it granted; review or remove it separately in Xero’s Connected apps.

Financial data and action records

When you ask a question, VODER fetches the data it needs from your connected accounting service in real time, returns the answer to your AI assistant, and discards the figures. We don’t store your invoices, balances, or transactions.

For VODER Actions, we store whether Actions is on for the organisation. For each attempted action other than creating a draft invoice, we store a duplicate-prevention record. That record identifies the organisation and action, and records when a request was prepared or attempted. For a confirmed result, it stores the Xero record ID and the result time. It does not contain contact names, invoice numbers or invoice line items. These records do not currently expire automatically, and the standard account-deletion process does not remove them.

What we do store

Only what’s needed to run the service: your email, the organisations you can access, encrypted connection tokens and provider identifiers for Xero, FreshBooks or QuickBooks Online, any feedback notes, and a limited record used to send one welcome email after you verify your identity and create an account, and to avoid duplicates. That record contains your internal account identifier, document and message versions, event times and delivery state. After the first delivery attempt, it also contains the VODER release and a one-way fingerprint used to verify the message. It never contains your email address or message body, and is deleted with your account. We also keep technical logs about each tool call (which tool ran and how long it took, never the parameter values or your figures). We don’t receive your chat with the assistant. Our Privacy Policy sets out everything we collect, how long we keep it, and how to ask us to delete it.

Where your data goes

Who operates VODER

VODER is built and operated by Windy Road Technology Pty Limited in Australia.

Contact

Questions about your data? Email privacy@voder.ai.

Back to home