Privacy Policy

1. Who we are

01 OneFiler is a trading name of Light and Dark Energy Ltd, a company registered in England and Wales (No. 15095270). 01 OneFiler (“we”, “us”, “our”) is a UK-based software service that helps micro-entity company directors file their Corporation Tax return (CT600) and annual accounts with HMRC and Companies House. We are the data controller for the personal data described in this policy.

We are registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration reference is ZC106109.

Service availability: OneFiler is intended solely for use by UK companies subject to UK Corporation Tax. We do not offer the service to companies or individuals outside the United Kingdom.

To contact us about privacy matters: privacy@onefiler.co.uk

2. What data we collect and why

3. How we store and protect your data

All data is stored in Supabase (PostgreSQL), hosted in the EU. Sensitive credentials such as your HMRC Gateway password are encrypted at rest using AES-256-GCM before being written to the database, and are permanently deleted as soon as your submission completes or fails definitively. Our application servers are hosted in London (UK).

We use Clerk for authentication. Clerk is SOC 2 Type II certified and GDPR-compliant. Standard Data Processing Agreements (DPAs) are accepted with Clerk, Supabase, and Fly.io — please verify that you have accepted these in the respective provider dashboards.

4. Accounting software integrations (QuickBooks Online and Xero)

OneFiler optionally integrates with QuickBooks Online (provided by Intuit Inc.) and Xero to allow you to import financial figures directly into your CT600 filing. These integrations are entirely optional — you can enter figures manually instead.

What we access:When you authorise the connection, we read your trial balance, profit & loss, and balance sheet data for your selected accounting period only. We request read-only access and do not write to or delete any data in your accounting software.

How the data is used: The imported figures are used solely to pre-populate the financial fields in your CT600 filing. The raw financial data from QuickBooks Online or Xero is never stored in our database — it is used transiently in memory to populate your form and immediately discarded. OAuth tokens (used to authenticate the connection) are stored encrypted and are permanently deleted as soon as the import completes.

Who can see it: Your QuickBooks Online or Xero data is only ever shown to you. It is never shared with any third party, used for any other purpose, or combined with data from other users.

Connection and disconnection:The connection is authorised via OAuth 2.0 — you are redirected to QuickBooks Online or Xero to grant permission and OneFiler never sees your QuickBooks or Xero password. The connection is automatically revoked immediately after your import completes. You can also disconnect at any time from within OneFiler, which revokes our access token on Intuit's and Xero's servers and deletes all stored credentials from our systems.

QuickBooks Online: Use of the QuickBooks Online integration is subject to Intuit's Privacy Statement. OneFiler's use of QuickBooks data is governed by the Intuit Developer Program Agreement.

5. How long we keep your data

HMRC Gateway credentials are permanently deleted from our systems as soon as your submission completes or fails. They are never retained beyond that point.

Draft and abandoned filings (status: draft or error) are automatically deleted after 90 days of inactivity.

Submitted filings (CT600 returns, accounts, tax computations) are retained for 6 yearsfrom the date of submission. This matches HMRC's statutory record-keeping requirement for Corporation Tax (s.1068 CTA 2010), so that your data is available for any HMRC enquiry during that window. After 6 years, all filing data is permanently deleted automatically.

Sanctions screening records are retained for 7 years to satisfy the audit trail requirements of the UK Money Laundering Regulations 2017.

Waitlist email addresses are deleted within 30 days of OneFiler launching, unless you have created an account.

If you delete your account, all personal data (company details, financials, credentials) is permanently deleted immediately, except for sanctions screening records which are retained for the 7-year statutory period.

6. Third parties we share data with

• HMRC — we submit your CT600 and accounts on your instruction. This is the purpose of the service.
• Companies House — we file your micro-entity accounts on your instruction.
• Clerk — handles authentication. Processes your email address. Standard DPA accepted.
• Supabase — stores your filing data. Hosted in the European Union. Standard DPA accepted.
• Fly.io — hosts our application servers (London region). Standard DPA accepted.
• Stripe — processes payments. Handles billing details only; does not receive your filing data. Stripe is PCI DSS Level 1 certified.
• Intuit (QuickBooks Online) — if you choose to connect QuickBooks Online, we read your financial data via Intuit's API solely to pre-fill your CT600. Financial data is never stored; OAuth tokens are held encrypted and deleted immediately after import. Governed by Intuit's Privacy Statement.
• Xero — if you choose to connect Xero, we read your trial balance via Xero's API solely to pre-fill your CT600. Financial data is never stored; OAuth tokens are held encrypted and deleted immediately after import. Governed by Xero's Privacy Policy.
• PostHog — session recording and product analytics, used to diagnose errors and improve the service. Data is hosted on PostHog's EU servers (Frankfurt). Sensitive fields are masked. Standard DPA accepted. You can object to this processing at any time by emailing privacy@onefiler.co.uk.

We do not sell your data, share it with advertisers, or use it for any purpose beyond providing the service.

6. Your rights under UK GDPR

You have the right to:

• Access — download a complete copy of your personal data instantly from your dashboard settings (JSON format), or email privacy@onefiler.co.uk
• Portability — the same self-serve download provides your data in machine-readable JSON format
• Erasure — delete your account instantly from your dashboard settings, which permanently erases all filing data; or email us
• Rectification — email privacy@onefiler.co.uk to correct inaccurate data
• Object to analytics — disable PostHog session recording for your account from your dashboard settings at any time
• Withdraw consent — for waitlist emails, email privacy@onefiler.co.uk

We will respond to any emailed request within one calendar month. Self-serve actions (data export, account deletion, analytics opt-out) take effect immediately.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies and session recording

We use strictly necessary cookies only — specifically, the authentication session cookie set by Clerk. We do not use advertising or tracking cookies. No consent is required for strictly necessary cookies.

We use PostHog to record anonymised session data (mouse clicks, navigation, and page interactions) to help us identify errors and improve the service. PostHog operates without cookies on our platform (session state is held in memory only). Sensitive fields such as your UTR, gateway credentials, and auth codes are masked and never captured. This processing is based on our legitimate interests in maintaining a reliable service. You have the right to object — you can disable recording instantly from your dashboard settings, or email privacy@onefiler.co.uk.

8. Changes to this policy

If we make material changes to this policy, we will notify you by email and update the “Last updated” date above. Continued use of OneFiler after notification constitutes acceptance of the updated policy.