Privacy Policy
Accounting Dashboard · last updated 14 September 2026
The Accounting Dashboard is private accounting and compliance software used by HVK & Associates ("the practice") to keep the books and statutory records of its own clients. It is not a public service and is not offered to anyone outside the practice.
Who runs it
The practice runs this software on its own computer. Nobody else hosts it, and no part of it runs on a third party's servers. Questions about this policy go to [email protected].
What Google data is used, and why
Staff of the practice may connect the practice's own Gmail mailbox. When they do, the application requests one Google permission:
gmail.readonly— permission to read mail. It is used to find compliance documents and tax notices that arrive by email (GST notices, TDS statements, bank statements clients send in) and file them against the right client and period.
The application never sends, deletes or alters email, and it never changes anything in the connected Google Account.
What is stored
Only what is needed to do the filing: the subject, sender, date and, where a document is attached, the attachment itself, stored in the practice's own records against the client it belongs to. Mail that is not about a client's compliance is not kept.
The access token Google issues is held on the practice's computer in encrypted form and is used for no purpose other than reading that mailbox.
What is never done
- Google user data is never sold, rented or traded.
- It is never used for advertising, profiling or market research.
- It is never transferred to any other person or company, except where the practice is required by law to produce a record.
- It is never used to train artificial-intelligence or machine-learning models.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long it is kept
Documents and accounting records are kept for as long as the law requires a chartered accountant to keep a client's records, and are then deleted. A mailbox that is disconnected has its stored token destroyed at once.
Taking the permission away
Access can be withdrawn at any time, either by disconnecting the mailbox inside the application or from Google Account → Third-party apps & services. Withdrawing it stops all further reading immediately.
Keeping it safe
The application is reached only over an encrypted (HTTPS) connection, every person using it has their own login, tokens and passwords are stored encrypted, and every action is recorded in an audit log.
Children
The application is used by the practice's staff and business clients. It is not intended for and is not made available to children.
Changes
If this policy changes, the date at the top of this page changes with it.