Security & confidentiality
What you share. What we receive.
Requesting accounting help, reading a downloaded skill and asking through our hosted AI connection send us different information. Here is how each works.
Requesting accounting help
Website help requests go to our private team queue. We receive the contact details and summary you submit so we can respond and check availability. With your consent, these details are shared with the accountant assigned to your request. Website requests are not broadcast to the network.
Start with a brief outline of the work and countries involved. Leave tax identifiers and financial records out of the initial form. A review requested through an AI tool can also include a working paper if you choose to send one.
How we handle your enquiry and consentReading a downloaded skill
A downloaded skill is a reference document. Reading that file locally does not call our server. If you put it into an AI application, that provider's privacy and retention terms apply to what you share there. Visiting our website still produces the technical data described in our Privacy Policy.
Using the hosted AI connection
When your AI calls OpenAccountants, we receive the arguments it sends. We log tool calls whether you are signed in or using anonymous access. Ordinary skill retrieval does not require your financial records.
- Logs include the tool, time, country and skill referenced, a conversation identifier, a summary of the response, and your account when signed in. We also record the AI client information it reports and a coarse country.
- Questions are capped at 500 characters after automated redaction of emails, phone numbers and identifier-shaped numbers. Redaction can miss personal details. Scenario details in a question can reach us and remain in the stored text.
- MCP usage records hold a salted hash of the caller's IP, rather than the raw IP. Signed-in usage is still linked to an account; hashing the IP does not make that activity anonymous.
Ask your AI to send only the context needed for the question. Your AI provider's settings govern what it holds; our Privacy Policy governs what OpenAccountants receives.
Who can see usage information
Approved contributing accountants may see redacted question text from their registered country, along with a broad user role and the skill used. These views exclude names, emails and accounts. You can ask us to exclude your account from these views by emailing info@openaccountants.com. Paying sponsors receive aggregate demand statistics, not question text or individual usage records.
MCP usage logs and question text are kept for as long as we run the service. You can ask us to delete the records linked to your account at any time. The Privacy Policy explains the full retention terms and your rights.
Read the full data and retention policyAccess and infrastructure
Supabase provides our database, authentication and file storage; Railway hosts the application; Resend delivers transactional email. Database access policies restrict user access, and server-side routes check permission before using privileged access.
You can inspect the software in our public repository. Skill authorship and an accountant's check describe the reference material; they do not certify your AI provider or guarantee an answer for your situation.