Privacy Policy

Yearcard is a service operated by ANA BOOKKEEPING SERVICES LTD ("we", "us", "our"). We are the controller of the personal data described in this policy.

You can reach us about anything in this policy by email at support@anabookkeepingshetland.com, by phone on +44 7567524998, or by post at Top Floor, The Garret, Esplanade, Lerwick, Shetland, Scotland ZE1 0LL.

This policy applies to anabookkeepingshetland.com and to the Yearcard application. It was last updated on 20 August 2026 and applies from that date.

Account data. Your email address, a password that we store only as a salted hash, and your display name if you set one. If you subscribe, we also hold your plan, your billing period, your renewal date and your billing country.

Content you create. The numbers and words you type into a project, the ordering and labelling we generate from them, the card visuals produced for you, and any short film built from those cards.

Files you upload. If you choose to upload photographs of your own work as a style reference, we hold those files while the project is live.

Usage and metering data. Which operations you ran, how many credits each one consumed, and when. We need this so that your allowance is accurate and so that you can check it yourself.

Technical data. IP address, browser and device type, and error logs. These are collected to keep the service running and secure.

Payment data. We do not receive, hold or store your full card number. Card details are entered directly with our payment provider, who is responsible for processing them. We receive only a token, the last four digits, the card brand, the expiry, and the result of each charge.

To provide the service you asked for — reading your numbers, generating card visuals, composing your cards, producing films and letting you export them. Legal basis: performance of a contract with you.

To bill you, meter your allowance and handle refunds and disputes. Legal basis: performance of a contract, and our legal obligations for tax and accounting records.

To keep the service secure, prevent abuse and investigate misuse. Legal basis: our legitimate interests in running a service that is not being attacked or defrauded.

To reply when you contact us. Legal basis: performance of a contract, and our legitimate interests in answering people who write to us.

To send you service messages you cannot opt out of — a receipt, a renewal notice, a security notice, a change to these terms. Legal basis: performance of a contract and our legal obligations.

To send optional product news, only if you have asked for it. Legal basis: your consent, which you can withdraw at any time from the link in every such message.

To measure how the site is used, only if you have accepted optional cookies. Legal basis: your consent.

The business numbers you type, the labels you write, the photographs you upload and the cards and films produced for you are used to make the thing you asked for. They are not used to train, fine-tune, benchmark or evaluate any machine learning model, ours or anyone else's, and they are never sold or licensed to anyone for that purpose.

Our image and video providers process your prompts and reference images under contracts that prohibit using that material for model training.

Separately from your content, we look at aggregate, non-identifying signals — such as how often a generation had to be repeated — to work out which parts of the product are failing people. Those signals contain no personal data and no part of what you typed.

Project content, including generated visuals, films and any files you uploaded, is kept for up to 30 days after you last touch a project, so that you can come back and finish it. After that it is deleted from live systems, and from backups within a further 30 days.

Account data is kept while your account is open. When you close your account we delete it, and the projects attached to it, within 30 days.

Billing and tax records are kept for six years from the end of the relevant financial year, because we are required to keep them.

Security and error logs are kept for 90 days.

You do not have to wait for any of this. You can delete a project, or your whole account and everything in it, from your account settings whenever you like.

Hosting and storage providers, who run the servers this service sits on.

Our payment provider, who processes card payments, subscriptions and refunds. We deliberately do not name a payment provider in this policy because the provider may change; you will always see who is taking the payment at the moment you pay.

Model providers, who generate card visuals and films from prompts that never contain your numbers, and from reference images you chose to upload.

Email delivery providers, who send receipts, renewal notices and password resets.

Analytics providers, only where you have accepted optional cookies.

Professional advisers, and law enforcement or regulators where we are legally required to disclose something.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Some of the providers listed above operate outside the United Kingdom. Where personal data is transferred out of the UK, we rely on either an adequacy decision made by the UK government for that country, or the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses.

You can ask us for a copy of the safeguard used for any particular transfer by writing to us at the address in this policy.

Under the UK GDPR and the Data Protection Act 2018 you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data deleted, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent where processing is based on consent.

You can exercise most of these immediately from your account settings. For anything else, email us and we will respond within one month. We will not charge you and we will not make it difficult.

If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk, or by calling their helpline. You do not have to complain to us first, although we would rather you gave us the chance to fix it.

If you are in California, you also have the rights given by the California Consumer Privacy Act: to know what personal information is collected and for what purpose, to have it deleted, to correct it, and not to be discriminated against for exercising any of those rights. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing for you to opt out of, but you may still make any of the other requests using the contact details above.

You must be at least 18 years old to create an account. This service is not directed at children and we do not knowingly collect personal data from anyone under 18.

If we become aware that an account belongs to someone under 18, we close it and delete the personal data associated with it. If you believe a child has given us personal data, email us and we will remove it.

We set a strictly necessary cookie to keep you signed in and a second one to record your cookie choice. Nothing else is set unless you accept optional cookies.

Rejecting optional cookies is exactly as easy as accepting them: the same two buttons, in the same place, at the same size. You can change your decision at any time from the cookie policy page.

The full detail, including the categories and how we treat Global Privacy Control signals, is in our cookie policy.

All traffic to and from this site is encrypted in transit using TLS. Content and account data are encrypted at rest. Passwords are stored only as salted hashes and are never recoverable, by us or by anyone else.

Access to production systems is limited to the people who need it, is individually logged, and requires multi-factor authentication.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it, and we will tell you directly where the risk to you is high.

If we make a material change to this policy we will email everyone with an account at least 14 days before it takes effect, and we will update the date at the top of this page.

If you do not agree with a change, you can close your account before it takes effect and, where you have paid for a period that has not yet finished, ask us for a refund of the unused part of that period.