Privacy policy
Last updated 29 October 2026
Sumi is accounting software made by Int+. This policy explains what we collect when you use Sumi, why, who we share it with, and the choices you have. We wrote it to be read, not skimmed past.
The short version
- Your books belong to you. We use them only to run Sumi for you.
- We never sell your data and never use it for advertising.
- We record how Sumi is used (which pages and features), without amounts, names or document contents, so we can improve it.
- You can ask for a copy of your data, or for it to be deleted, at any time.
Who is responsible
Int+ (“we”, “us”) runs Sumi and is responsible for the personal data in your account. For the information you record about your own customers and suppliers, your business decides what goes in and why; we process it on your behalf.
What we collect
| What | Why |
|---|---|
| Account details: your name, email, password (stored only as a secure hash), and your role in each business | To create your account, sign you in and keep it secure |
| Business details: name, address, tax ID, logo, bank details for invoices | To show on your invoices and set up your books |
| Your books: invoices, bills, payments, expenses, stock, bank statements you upload, and the customers and suppliers you add | This is the service: keeping your accounts |
| Security records: sign-ins, IP address, browser, login codes, an audit trail of changes | To protect your account and show who changed what |
| Usage: pages visited (with record IDs removed), features used, error messages shown, time on page | To find what is confusing and improve Sumi |
| Support messages you send us | To help you |
Usage records never include amounts, names, descriptions or document contents, and nothing is recorded in the desktop app. We delete usage records after 13 months.
Who we share it with
We use a small number of trusted providers to run Sumi. They may only use your data to provide their service to us.
- Vercel hosts the Sumi website and app.
- Neon stores the database, in London, United Kingdom.
- Resend sends emails: invoices you send, reminders, login codes and notifications.
- Google (Gemini) powers the AI features, only when you use them: reading a receipt or statement, drafting an invoice from text, suggesting categories, or answering questions about your books.
- Squad (GTCO) or Paystack process card, transfer and USSD payments when a business pays for its Sumi plan. They receive the payment details, not your books.
- DigiTax, only if you switch on NRS e-invoicing, to submit invoices to the Nigeria Revenue Service.
We will share data with authorities only when the law requires it. If Sumi is ever sold or merged, this policy will continue to apply to your data and we will tell you first.
International transfers
Sumi is used in Nigeria and our database is in the United Kingdom. Some providers process data in other countries, including the United States. We choose providers that offer recognised safeguards for international transfers.
Cookies
Sumi uses only the cookies it needs to work: one that keeps you signed in, and others for login codes and trusted devices. The app also keeps a random visit number in your browser for usage records. We do not use advertising or tracking cookies, so there is no cookie banner.
How long we keep it
We keep your account and books while your account is open, because businesses need their records for years (tax law usually requires about six years). If you ask us to delete your account, we delete it within 30 days, except what we must keep by law. Usage records are deleted after 13 months.
Your rights
Under Nigeria's Data Protection Act 2023, and similar laws where you live, you can ask us to:
- give you a copy of your personal data;
- correct anything that is wrong;
- delete your data, or limit how we use it;
- move your data to another service.
Email info.intplus@gmail.com and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission.
Security
Connections are encrypted, passwords are stored as secure hashes, login codes are available for every account, and each team member has their own role. Sumi staff can see account details and activity to support you, but not your books, customers or amounts. If a breach affects you, we will tell you and the regulator as the law requires.
Children
Sumi is for businesses and is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect. See also our terms of service.
Contact
Questions about privacy: info.intplus@gmail.com.