How can we help?

Vextor® does not modify your Xero data — we connect in read-only mode. We do not store your underlying accounting transaction data; this remains in Xero at all times. Vextor® does hold: your account and login details, your licence record, session data, and your generated Vextor® datapack output. All data is handled in accordance with our Privacy Policy and UK GDPR.

No. Your financial data is never shared with or accessible to AI language models, and is never used to train them. Vextor® uses AI only to generate written narrative summaries on your dashboard — this uses anonymised prompts that do not include your raw financial data. Your data stays private to you.

To disconnect Vextor® from Xero, log in to your Xero account and go to Settings → Connected Apps. Find Vextor® in the list and click Disconnect. You can also disconnect from within Vextor® via Settings → Disconnect. This immediately revokes Vextor®'s access to your Xero data. If you're on Vextor®'s free tier, disconnecting starts a 30-day countdown after which your data is permanently deleted. If you reconnect before the 30 days is up, the scheduled deletion is cancelled and your data is retained as normal. If you need to reconnect, go through the Connect flow again from your Vextor® account.

If your Xero connection drops — for example, after a password change or token expiry — go to Settings and click Redo Mapping to start a fresh OAuth flow. This starts a fresh OAuth flow and restores your connection. Your existing data and assumptions are preserved throughout.

No. Reconnecting Xero only refreshes your OAuth connection — it does not affect your forecast assumptions (growth rates, margins, targets) or the calculated projection values. The only actions that update your forecast are: editing your assumptions directly, or running a Refresh Actuals after updating your account mapping. Your model is safe to reconnect at any time.

Magic links expire after 15 minutes. Request a fresh one from the login page. If you continue to have issues, check your spam or junk folder, or contact us at [email protected] with your registered email address.

Vextor® pulls your latest data each time you connect or reconnect Xero. If your Xero books have been updated since your last connection, reconnect to fetch the latest figures. Data is not automatically synced in real time.

Go to the Home page and click the Download button. You can download your Board Report as a Microsoft Word document or open it directly in Google Docs. The report is generated fresh from your current data on every request.

Email us at [email protected] with your organisation name and a description of the issue. We typically respond within one business day.

Your data is stored on Microsoft Azure infrastructure (EU West / Amsterdam region), in isolated per-client directories. Data is encrypted in transit (TLS) and stored on Azure EU West (Amsterdam) servers with disk-level encryption. Application-level AES-256 database encryption is active. We store only what is needed to generate your financial reports — account mapping, aggregated figures, and forecast assumptions. We do not store raw transaction-level data; this remains in Xero at all times.

All connections between your browser and Vextor® use TLS 1.3 (HTTPS). Connections to Xero use OAuth 2.0 over HTTPS — your Xero credentials are never passed to or stored by Vextor®. Vextor®'s infrastructure is additionally protected by Cloudflare, which provides DDoS protection and an extra layer of TLS termination.

Vextor® requests read-only Xero OAuth 2.0 scopes only: accounting.reports.trialbalance.read, accounting.reports.balancesheet.read, accounting.invoices.read, accounting.settings.read, and standard identity scopes (openid, profile, email). We request no write scopes and cannot modify your Xero data in any way. You can revoke Vextor®'s access at any time from Xero under Settings → Connected Apps.

Vextor® uses magic link authentication — no passwords are stored anywhere. Login links are single-use, expire after 15 minutes, and are sent only to your verified email address. Sessions are encrypted server-side and expire on inactivity. Each licence is tied to a specific Xero organisation (tenant ID). Vextor®'s operations team can access infrastructure logs for support purposes but does not read your financial data except when diagnosing a support issue you have raised with us.

Yes. Vextor® (McMillan Grubb Ltd) acts as a data processor on behalf of your firm (the data controller). Your data is retained for the duration of your active licence. On cancellation, termination, or trial expiry without conversion: your access to Vextor® — including login sessions — is terminated immediately; your Xero OAuth connection is disconnected at the point your data is deleted from our systems (within the 30-day period below), or immediately if you request deletion sooner; and all remaining data — GL data, session data, and generated outputs — is permanently deleted within 30 days. If you're using Vextor's free tier, your data is retained for as long as your accounting-system connection remains active. Disconnecting (either from within Vextor or directly in your accounting system) starts a 30-day countdown, after which your data is permanently deleted. Reconnecting before the 30 days is up cancels the countdown and your data is retained as normal. Account and contact details are retained for a minimum of 3 years as required by law. You may request access to, correction of, or deletion of your data at any time by emailing [email protected]. We do not sell or share your data with third parties. See our full Privacy Policy for details.

Our systems are monitored 24/7 with automated alerting. In the event of a security incident affecting your data, we will notify all affected clients within 72 hours, in line with GDPR Article 33 requirements. To report a security concern directly, email [email protected].