Privacy Policy
This policy explains what information WhichOrg handles. The short version: the WhichOrg extension makes no network requests, and your Xero accounting data never leaves your browser.
WhichOrg is made by GetGuru, the software division of Easier on Ears (Pty) Ltd (registration number 2018/599850/07, 332 Smuts Avenue, Lyttelton Manor, Centurion, Gauteng, 0157), which is responsible for the information described here. In this policy, "we" and "us" mean Easier on Ears (Pty) Ltd. Contact: support@whichorg.com.
1. The browser extension
The extension runs only in your browser. It doesn't connect to the Xero API and doesn't send any information to us or anyone else.
To work, it keeps the following in your own browser:
- The colour you chose for each organisation, with that organisation's Xero code and name.
- Your settings, such as whether the window frame is on.
- If you have a paid plan, your licence code.
- The date the extension was first installed.
These are saved using your browser's extension storage. If you're signed in to your browser with sync turned on, your browser provider (for example Google or Microsoft) may sync them between your own devices, under that provider's privacy policy. We never receive them.
So that each Xero page appears in the right colour straight away, before Xero has finished loading, WhichOrg also keeps a small copy of its colours in the Xero website's own storage in your browser. That copy holds Xero's organisation codes, the colours, and a scrambled, one-way form of each organisation's name. It never holds the names themselves. As with anything a website stores in your browser, Xero's own pages can read it. It stays on your computer and is never sent to us.
To colour Xero pages, the extension reads the page you have open, such as its address and the organisation name shown in Xero's top bar. This happens in your browser and nothing is sent anywhere. The extension does not read the contents of your invoices, bills, reports or any other accounting data.
2. Buying a licence
Payments are handled by Paddle.com, our Merchant of Record. Paddle collects the details needed to process your payment, such as your name, email address, billing address and payment details, under Paddle's privacy policy. We don't receive or store your payment card details.
When you buy, Paddle tells us your email address, the plan you bought and a transaction reference, so we can create your licence code and email it to you. The email is sent by Resend, our email delivery provider, under Resend's privacy policy. We don't keep a separate database of customers; your purchase records are held by Paddle.
3. This website
We count visits to this website so we know how many people find it and from which countries. For each page opened, we record the page, the country (worked out by Cloudflare from your connection), the website that linked to it, if any, and the time. We don't record your IP address or anything else that identifies you, put no cookies in your browser, and can't tell one visitor from another or follow you to other websites. The detailed counts are kept for three months; after that we keep only daily totals per country, page and linking website. Nothing is counted inside the WhichOrg extension. Our own visits are left out using a cookie on our own devices only.
This website uses no cookies of its own and no advertising trackers, and it loads nothing from other websites, with one exception: the checkout page (whichorg.com/checkout) loads Paddle's secure checkout so you can pay, and Paddle may use cookies there to process your payment, under Paddle's privacy policy. It is hosted by Cloudflare, which processes technical information such as IP addresses to deliver the site and protect it from abuse, under Cloudflare's privacy policy.
4. Support emails
If you email us, we use your email address and message to reply. We keep support emails for as long as needed to help you, and delete them when they're no longer needed.
5. Why we may use it (legal basis)
We are the controller of the personal information described here. We use it only on these grounds:
- To perform our contract with you: creating your licence and emailing it to you after you buy.
- Our legitimate interests: answering your support emails, counting visits to this website so we know how people find it, and keeping our services secure and free of abuse. We don't use it for anything that would override your own interests or rights.
- Legal obligations: keeping records the law requires, and responding to lawful requests from authorities.
We keep the information only as long as needed for these purposes, protect it with appropriate technical and organisational measures (such as encrypted connections and restricted access), and share it only with the providers named in this policy (Paddle, Resend and Cloudflare) and, where needed, our professional advisers or authorities as the law requires.
6. Your rights
Depending on where you live, including under South Africa's Protection of Personal Information Act (POPIA) and the EU/UK GDPR, you may have the right to access, correct or delete personal information we hold about you, and to object to how it's used. Email support@whichorg.com. For payment records, you can also contact Paddle directly. Uninstalling WhichOrg removes its settings and licence from your browser. The small colour copy in the Xero website's storage remains until you clear your browser's site data for xero.com.
7. Changes
If this policy changes, we'll update the date above. If we ever change what the extension sends (today, nothing), we'll say so clearly before that change is released.