Privacy Policy
Current as at 25 August 2026. Mabel is a new product and this policy will grow as it does — we’ll update the date above, and email you before anything material changes. It isn’t a substitute for your own legal advice. If anything here is unclear, just ask us — we’d rather explain it than have you guess.
Mabel (“Mabel”, “we”, “us”) is cloud accounting software for individuals and small entities, operated by Mabel Software Pty Ltd (ABN 61 701 726 972). This policy explains what information we collect, why, where it lives and what you can do about it. It is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. What we collect
Information you give us
- Account details — your email address and a password. Passwords are hashed by our authentication provider; we never see or store them in readable form.
- Entity details — the name and type of each entity you set up, and optionally its ABN, ACN and Tax File Number.
- Financial records — bank statement lines you import, the transactions, journals and chart of accounts you create, and any files you upload (CSV, PDF or screenshots of statements and trial balances).
- Ask Mabel conversations — the messages you send to Mabel, the files attached to them, and the “memory files” of coding rules you teach her.
- Contact messages — the name, email address and message you submit through our contact form.
Information collected automatically
- Sign-in timestamps and session cookies needed to keep you logged in.
- Basic technical information such as your browser user agent, recorded with contact form submissions.
- Server logs generated by our hosting provider.
We do not use advertising cookies, tracking pixels or third-party analytics that profile you across other websites, and we do not sell your information to anyone.
2. Tax File Numbers
If you choose to store an entity’s Tax File Number, it is treated as sensitive information under the Privacy (Tax File Number) Rule 2015. We use it only to identify the entity within your own file, it is always displayed masked in the interface, it is never disclosed to any third party, and you can delete it at any time. You are never required to give us a TFN in order to use Mabel.
3. Why we use your information
- To provide the service — keeping your books, producing reports and activity statements.
- To run Ask Mabel, our AI bookkeeper, when you send her a message.
- To keep your account secure and to enforce the limits of your plan.
- To respond when you contact us.
- To understand how Mabel is used in aggregate, so we can improve it.
We do not use your financial records or your Ask Mabel conversations to train AI models.
4. Who we share it with
We use a small number of service providers, and only what each one needs:
| Provider | What they handle | Where |
|---|---|---|
| Supabase | Database and authentication — your account, entities and financial records | Sydney, Australia |
| Vercel | Application hosting and server logs | Sydney, Australia |
| Anthropic | The Claude model behind Ask Mabel — receives the messages and files you send her, plus the relevant accounting data needed to answer | United States |
| Sign-in, only if you choose to log in with Google — receives nothing but the fact you signed in | United States |
Sending data to Anthropic and Google involves an overseas disclosure. By using Ask Mabel or Google sign-in you consent to that disclosure. If you would rather your financial data never left Australia, you can use Mabel without ever sending Ask Mabel a message.
We may also disclose information if the law requires it, or to protect our rights or the safety of others.
5. Other people’s data
If you invite someone else to an entity, they can see that entity’s records. If you enter information about third parties — payees, beneficiaries, related entities — you are responsible for having the right to do so.
6. Security
Data is encrypted in transit. Access to your entities is enforced at the database level, so one user cannot read another’s records. Only people you have invited to an entity can see it. No system is perfectly secure, and we cannot guarantee absolute security, but we will tell you promptly if a data breach affects you, as required by the Notifiable Data Breaches scheme.
7. How long we keep it
We keep your records for as long as your account is open. If you delete an entity, its records are deleted. If you close your account, we will delete your personal information within 90 days, except where we are required to keep it by law. Contact form messages are kept while they are useful for support.
8. Your rights
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct anything that is wrong;
- delete your account and its data;
- explain anything in this policy.
The quickest way to reach us is the contact form; you can also email hello@mabelbooks.ai. We will respond within 30 days. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
9. Children
Mabel is not intended for anyone under 16, and we do not knowingly collect their information.
10. Changes
If we change this policy we will update the date at the top, and we will tell you by email before any change that materially affects how we handle your information.