Privacy Policy
Last updated: 22 May 2026
1. Who We Are
Filesy is operated by NexoraOS Ltd, a company registered in England and Wales. We are the data controller for the personal data we process through this website and service.
2. What Data We Collect
We collect the following categories of personal data:
- Account information: name, email address, password (encrypted)
- Property information: addresses, rental amounts, expense records
- Financial data: bank transaction data (via Open Banking, with your explicit consent)
- Usage data: pages visited, features used, device and browser information
- Communication data: emails, support tickets, feedback
3. How We Use Your Data
We use your data to:
- Provide and improve the Filesy service
- Generate tax reports and submit to HMRC on your behalf
- Send you important service notifications and deadline reminders
- Process payments and manage your subscription
- Provide customer support
4. Data Sharing
We do not sell your personal data. We share data only with:
- HMRC — for MTD submissions (only when you initiate a submission)
- Open Banking providers — FCA-regulated, for bank data import
- Payment processors — for subscription billing
- Hosting providers — for service infrastructure
5. Data Security
We use industry-standard encryption (TLS 1.3) for data in transit and AES-256 for data at rest. All Open Banking connections are handled through FCA-regulated providers. Access to production data is restricted and logged.
6. Your Rights
Under UK GDPR, you have the right to access, correct, delete, or export your data. You can also object to processing or withdraw consent at any time. Contact us at [email protected] to exercise these rights.
7. Cookies
We use essential cookies to operate the service and analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.
This site is supported by advertising. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. These advertising cookies allow Google and its partners to show you relevant ads. You can opt out of personalised advertising in Google Ads Settings, or learn more via the Google partner-sites policy.
8. Contact
For privacy-related questions, contact our Data Protection Officer at [email protected].