Skip to main content

Privacy Policy

Last updated: 13 May 2026

Grit2Gains is committed to protecting your personal information. This policy explains how we collect, use, and safeguard your data.

1. Information We Collect

We collect information you provide directly (name, email address, business details) and data accessed via your connected Xero account (invoices, bills, contacts, and financial reports) in read-only mode.

2. How We Use Your Information

We use your information to provide the service, display financial insights, and improve the product. We do not sell your data to third parties.

We may also use your financial data in an anonymised and aggregated form to generate industry benchmarks that are displayed within the application. This processing removes all identifying information before any aggregation occurs — your individual business figures are never shared with or visible to other users.

3. Industry Benchmarking

Grit2Gains provides benchmarking features that compare your business metrics against industry averages. To produce these averages, we process financial data from consenting users in aggregate. The following protections apply:

  • Data is anonymised before aggregation — no individual business is identifiable in benchmark outputs.
  • Benchmark results reflect statistical averages across multiple businesses and are never sourced from a single user.
  • Your raw financial figures are never disclosed to other users or third parties.

4. Data Storage

Your data is stored securely on Australian-based servers. Sensitive credentials (such as Xero tokens) are encrypted at rest.

5. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time.

6. Third-Party Services

We integrate with Xero and Stripe. Their privacy policies also apply when you use those integrations.

7. Cookies

We use session cookies to keep you logged in. We do not use tracking or advertising cookies.

8. Your Rights

You have the right to access, correct, or delete your personal information. Contact us to exercise these rights.

9. Contact

If you have questions about this policy, please contact us.