Privacy Policy

Last updated: 24 July 2026. Nudge is operated by Green and Home Limited (trading as Grafto), a company registered in England and Wales.

What we collect

• Account data — your email address, used for sign-in links, the findings digest and service messages.
• Accounting data — with your explicit authorisation, we read quotes/estimates, invoices and contact names from your Xero or QuickBooks Online organisation, using read-only permissions. We never request write access and cannot modify your ledger.
• Findings — the results of our checks (e.g. "quote X appears uninvoiced"), stored so your dashboard and history work.

How it's protected

• OAuth tokens are encrypted at rest (AES-256-GCM) and never shared with third parties.
• All traffic is HTTPS. Data is processed on Cloudflare's infrastructure.
• We use Resend to deliver emails. We do not sell data, run advertising, or use your accounting data to train AI models.

Disconnecting & deletion

You can disconnect an organisation at any time from the dashboard (or from within Xero/QuickBooks), which revokes our access. Email hello@grafto.co.uk to have your account and stored findings deleted.

Contact

Questions: hello@grafto.co.uk.