Privacy Policy

Last updated 9 September 2026.

Mabel (“Mabel”, “we”, “us”) is cloud accounting software for individuals and small entities, operated by Mabel Software Pty Ltd (ABN 61 701 726 972). This policy explains what information we collect, why, where it lives and what you can do about it. It is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What we collect

Information you give us

• Account details — your email address and a password. Passwords are hashed by our authentication provider; we never see or store them in readable form.
• Billing details for a paid plan: your name, email address and billing address, and a record of what you have been charged and have paid. Your card number never reaches Mabel. Card details are entered with our payment provider, Stripe, and held by them; we see only the card type, its last four digits, and whether a payment succeeded.
• Entity details — the name and type of each entity you set up, and optionally its ABN, ACN and Tax File Number.
• Financial records — bank statement lines you import, the transactions, journals and chart of accounts you create, and any files you upload (CSV, PDF or screenshots of statements and trial balances).
• Ask Mabel conversations — the messages you send to Mabel, the files attached to them, and the “memory files” of coding rules you teach her.
• Contact messages — the name, email address and message you submit through our contact form.

Information collected automatically

• Sign-in timestamps and session cookies needed to keep you logged in.
• Basic technical information such as your browser user agent, recorded with contact form submissions.
• Server logs generated by our hosting provider.
• Advertising and analytics cookies — which pages you visit on this website, including inside Mabel once you are signed in, along with your browser, device and approximate location. See below.
• Diagnostic reports when something goes wrong — what the error was and where it happened in our code, so we can fix it. We deliberately strip IP addresses, cookies, request bodies and the query string out of these before they leave, because password recovery links travel in query strings and have no business in an error report.

Advertising and analytics

We use third-party advertising and analytics services on this website, including inside Mabel once you are signed in. They set cookies and record which pages are visited, so we can measure which advertisements bring people to Mabel and understand how the product is used. These services are operated by overseas companies and are able to recognise you across other websites.

What they never receive: your financial records, your Ask Mabel conversations, the names of your entities, or anything you type into Mabel. Mabel’s web addresses do not contain entity or account names, and we have switched off the in-product search tracking that would otherwise report what you searched for.

We do not sell your information to anyone.

2. Tax File Numbers

If you choose to store an entity’s Tax File Number, it is treated as sensitive information under the Privacy (Tax File Number) Rule 2015. We use it only to identify the entity within your own file, it is always displayed masked in the interface, it is never disclosed to any third party, and you can delete it at any time. You are never required to give us a TFN in order to use Mabel.

3. Why we use your information

• To provide the service — keeping your books, producing reports and activity statements.
• To run Ask Mabel, our AI bookkeeper, when you send her a message.
• To keep your account secure and to enforce the limits of your plan.
• To take payment for a paid plan, to send you receipts, and to keep the billing records the law requires us to keep.
• To respond when you contact us.
• To understand how Mabel is used in aggregate, so we can improve it.
• To measure and improve our advertising, so we can tell which advertisements are worth running.

We do not use your financial records or your Ask Mabel conversations to train AI models.

4. Who we share it with

We use a small number of service providers to run Mabel, and each receives only what it needs to do its job. They handle database and authentication, application hosting, the AI model behind Ask Mabel, email delivery, error monitoring, payment processing, and advertising and analytics measurement. We don’t list them by name here, because the list changes and a stale list is worse than an honest description — if you want to know who they are at any given moment, ask us and we’ll tell you.

Your books are stored in Australia. Some of the services we rely on are in the United States, so using Mabel involves some overseas disclosure.

The part that matters most: your financial records only leave Australia if you choose to use Ask Mabel. If you never send her a message, your entities, transactions and reports stay here.

Everything else that goes overseas is narrow, and we would rather say so here than bury it. Your email address reaches our email provider whenever we send you a confirmation or a password reset. If you buy a paid plan, your name, email address, billing address and card details go to Stripe, our payment provider, in the United States. Stripe receives nothing from inside your books. A diagnostic report reaches our error-monitoring provider if something breaks while you are using Mabel — it receives no financial data. Our advertising and analytics providers receive the pages you visit, as described above, and nothing from inside your books.

We may also disclose information if the law requires it, or to protect our rights or the safety of others.

5. Other people’s data

If you invite someone else to an entity, they can see that entity’s records. If you enter information about third parties — payees, beneficiaries, related entities — you are responsible for having the right to do so.

6. Security

Data is encrypted in transit. Access to your entities is enforced at the database level, so one user cannot read another’s records. Only people you have invited to an entity can see it. No system is perfectly secure, and we cannot guarantee absolute security, but we will tell you promptly if a data breach affects you, as required by the Notifiable Data Breaches scheme.

7. How long we keep it

We keep your records for as long as your account is open. If you delete an entity, its records are deleted. If you close your account, we will delete your personal information within 90 days. There is one exception, and we would rather name it than leave it inside the phrase “required by law”: billing records. Australian tax law requires us to keep records of what we charged and what you paid for five years, so those are kept for that period and then deleted. They are invoices and payment records, not your books. Contact form messages are kept while they are useful for support.

8. Your rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong;
• delete your account and its data;
• tell you which service providers we currently use;
• explain anything in this policy.

The quickest way to reach us is the contact form; you can also email hello@mabelbooks.ai. We will respond within 30 days. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

You can also stop most advertising and analytics tracking in your browser’s settings, or with a tracker-blocking extension. Mabel works exactly the same either way.

9. Children

Mabel is not intended for anyone under 16, and we do not knowingly collect their information.

10. Changes

If we change this policy we will update the date at the top, and we will tell you by email before any change that materially affects how we handle your information.