Supplier Invoice Tool privacy
Updated 12-11-2026. Plain words, no small print.
Supplier Invoice Tool is run by Nero Engine Group Ltd (company 16521432, England and Wales), trading as Nero Labs. We are the data controller for anything listed here. Contact: founder@neroengine.com.
What we keep
- The business account: trading name, company number, VAT number and settings.
- Each supplier invoice you add: the original email, PDF or photo, and what was read from it (supplier, dates, lines, prices, totals, job references). Supplier invoices can include names and delivery addresses printed on them.
- The Xero connection, if you make one: the sign-in tokens, scrambled before they are stored, and the organisation name.
- The business key is stored only as a one-way scrambled code.
What we never keep
- Your mailbox: your AI passes in only the invoices you choose.
- Card or bank details.
- IP addresses.
Usage counts
For every call we log the time, the tool name, whether it worked, the AI app's name and version, the country and a one-way scrambled caller code. We do not log what you asked, the answers, or your IP address. We use this only to see which tools are used and to fix faults.
Other services involved
- Cloudflare runs the server and stores the invoice book and originals. Scanned invoices and photos are read by an AI model that runs on Cloudflare (Workers AI); they are not sent to any other AI company.
- Xero, only if you connect it: draft bills and the original invoices go to your own Xero organisation.
Deleting your data
To delete everything, email founder@neroengine.com from the business email with the business name. We delete the invoice book, every original and the Xero connection within 30 days and confirm by email. disconnect_xero forgets the Xero connection straight away; review_invoice can remove a single invoice.
Your rights
Under UK data protection law you can ask what we hold about you, ask us to correct it or delete it, or object to how it is used. Email founder@neroengine.com and we reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Other things
- We never sell data, never show adverts and never use what you send to train AI models.
- Your AI app (for example Claude or ChatGPT) has its own privacy policy for what you type into it.
- If this policy changes, the new version goes on this page with a new date.