Privacy Notice

Project Plus is an independent, read-only reporting add-on for FreeAgent. It sits on top of your existing FreeAgent account and never changes anything in it. This notice explains what information we access, what we store, why, and the choices you have. It is written to reflect how the product actually works.

1. Who we are

Project Plus is operated by The Docherty Partnership Limited ("we", "us", "our"), which is the data controller for the information described here.

2. The information we access and store

FreeAgent data (read-only)

When you connect your FreeAgent account, you authorise Project Plus to read your accounting data through FreeAgent's official API. This includes your company details, projects, and transactions such as invoices, bills, expenses, bank explanations and journal entries, together with the name and email address of the FreeAgent user who connects the account. Access is read-only at all times - Project Plus never writes to, edits or deletes anything in FreeAgent.

Information you create in Project Plus

As you use the app, we store the adjustments you make as an overlay that sits on top of your FreeAgent data: project allocations, splits, spreads, reallocations, custom profit-and-loss layouts, virtual accounts and edited descriptions. These are held separately for each company and are used only to produce your reports.

Account and billing information

To manage subscriptions we store a company identifier, your subscription status and the relevant dates, and the customer and subscription reference numbers issued by our payment processor, Stripe.

Sign-in information

We use a secure, browser-only ("httpOnly") session cookie and a cross-site-request-forgery token so you can stay signed in safely. The access token that lets the app read your FreeAgent data is held in a protected (hashed) form.

3. Payment information

Payments are handled by Stripe, a certified payment provider. Card details are entered directly into Stripe's secure checkout - we never see or store your full card number. We only receive confirmation of your subscription and limited details such as the card type and last four digits, so we can show them back to you on your billing page.

4. Cookies

Project Plus uses only the cookies that are essential to sign you in and keep your session secure. We do not use advertising cookies or third-party analytics trackers.

5. Why we process your data (legal bases)

• To provide the service you have asked for - reading your FreeAgent data and producing your reports (performance of a contract, and your consent given when you connect FreeAgent).
• To run and improve the service - managing subscriptions, keeping the service secure and reliable (our legitimate interests).
• To meet legal and accounting obligations - for example keeping records of payments.

6. Who we share it with

We do not sell your data. We share it only with the service providers needed to run Project Plus, and only to the extent required:

• FreeAgent - the source of your accounting data, accessed with your authorisation.
• Stripe - to process payments and manage subscriptions.
• Our hosting provider - the servers that run the service.
• Encrypted backups - your data is backed up in encrypted form with a reputable cloud backup provider so it can be recovered if needed.

7. Where your data is held

The service runs on a server located in the United Kingdom. Backups are encrypted before they leave the server. Some providers, such as Stripe, may process data outside the UK under their own appropriate safeguards.

8. How long we keep it

We keep your account, billing records and the overlay data you have created for as long as you have an active account with us, so your reports and history remain available. If you close your account or ask us to, we will delete the overlay data we hold for you, subject to any records we are required to keep for legal or accounting purposes. You can revoke Project Plus's access to FreeAgent at any time (see below), which immediately stops any further reading of your data.

9. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these rights, contact us at projectplus@thedochertypartnership.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Revoking access and cancelling

You can disconnect Project Plus from FreeAgent at any time in FreeAgent under Settings, then Approved Applications. You can cancel your subscription at any time from the Billing area inside Project Plus once you are signed in; you keep access until the end of your current billing period.

11. Changes to this notice

We may update this notice from time to time. When we do, we will change the "last updated" date at the top of the page.

12. Contact

Questions about this notice or your data? Email projectplus@thedochertypartnership.com or see our contact page.