Handy

Handy Accountant Agreement

Version v5 · in force from 1 November 2026

Handy Accountant Agreement

Version 5 · Effective 1 November 2026 · HandyApp Ltd, company number 17153591

1. Who this is between

This agreement is between HandyApp Ltd ("Handy", "we", "us"), a company registered in England and Wales, number 17153591, and you, the accountant or accounting firm accepting it.

If you are accepting on behalf of a firm, you confirm you are authorised to bind that firm, and "you" means the firm throughout.

When you accept this agreement or a new version of it, we record your firm's legal name, its company or partnership number if it has one, and its address, your name, role and email, the exact version you accepted, the date and time, and your express confirmation that you are authorised to bind the firm. Where the firm is a company or partnership, a director, partner or owner accepts.

Joining or founding a firm. When you found or join a firm on Handy, new work for clients Handy introduces is done under the firm's acceptance of this agreement, its anti-money-laundering supervision and its payment account, and yours stop counting for new clients. Returns already under way carry on as they are.

Leaving a firm. If you leave a firm, the firm keeps its clients and their returns. You keep read-only access to the work you did for the firm, including the invoices you issued, and your own clients go with you.

2. What Handy is, and what it is not

Handy is software. We run a platform that introduces clients to accountants and gives you tools to manage the work: documents, messaging, task tracking, invoicing and payment collection.

We are not a tax agent, we are not a firm of accountants, and we do not give tax advice. We are not a party to the professional engagement between you and your client. We do not review, approve or take responsibility for your work.

Where you take on a client through Handy, you are the professional. You decide what advice to give, what to file, and what to sign. That responsibility is yours and cannot be shared with us.

For clients we introduce, you use the standard client terms in section 8B, and we administer them: we apply the refund schedule and the fault list on your behalf. That does not make us a party to your engagement.

3. What you confirm about yourself

You confirm, and must continue to be able to confirm for as long as this agreement is in force, that:

  • you hold the professional credentials and registrations you have told us about, and they are current and unrestricted;
  • for each country you accept returns in, you hold every registration the law of that country requires to prepare and lodge tax returns for a fee;
  • in the UK, you are supervised for anti-money-laundering purposes by a professional body or HMRC, and you meet your customer due diligence and sanctions obligations;
  • in Australia, you are registered with the Tax Practitioners Board as a tax agent for the services you provide, and you comply with the Tax Agent Services Act 2009, the Code of Professional Conduct and the Board's education and professional indemnity requirements;
  • you are permitted to carry out the work you accept, in the jurisdictions you accept it in;
  • you hold professional indemnity insurance appropriate to your work, or your firm does;
  • you are not subject to any disciplinary finding, investigation or restriction that would affect your ability to act.

Tell us within five working days if any of that stops being true.

We verify your authorisation for each country before you can be matched there, and we may verify it again at any time. We record your anti-money-laundering supervisor and reference in the UK, and your Tax Practitioners Board registration number and expiry in Australia. Tell us within five working days if your supervision or registration is suspended or ends. A data-preparation service, without the registration to lodge, cannot be matched to returns.

4. Getting matched, confirming, and availability

When you set yourself available, you are telling us you are ready to take a new client now. An available accountant may be matched and assigned a client automatically, without a further step from you. If you set yourself Busy or Away until a date, you are available again from that date, and we remind you the day before.

Before the client accepts your terms, they see who you are: your full name, your firm or business name, business address, email address and professional registration number, as well as your credential, years in practice, countries, languages and price. Keep these details accurate in Handy.

Confirming. When the client accepts your terms, their card is held for your price. It is charged when you confirm the return, or 12 hours after the match unless you have handed the client back by then. If you have already confirmed, or the 12 hours have passed, when the client accepts, the card is charged at once. When Handy support assigns a client to you, the 12 hours run from that assignment. By setting yourself available, or letting a Busy or Away period you set run out, you confirm that you complete your conflict and client-acceptance checks before doing so. We record your confirmation when you set yourself available, for each version of these words. From the moment of the match you can see who the client is, and hand them back for a conflict, sanctions, anti-money-laundering or professional reason.

If you are not ready, set yourself unavailable. There is no penalty for being unavailable and no advantage to being available when you are not.

Handing back. You may hand a client back before their card is charged, and the hold is released. A hand-back for a conflict of interest is no-fault and carries no consequence. Other hand-backs are recorded. Once the card is charged, you cannot hand back: ask Handy support to release you, and the client is refunded in full (section 8A).

5. The work

You and the client agree the scope. You issue the engagement letter. You keep the records you are professionally required to keep.

Do the work with the care and skill expected of a competent professional in your jurisdiction, and to the deadlines that apply to it.

When the scope changes, for clients we introduce:

  • If the client's affairs need more work than they described, propose a new price through Change the price in Handy. It is the only way to price extra work for these clients. Do not invoice them separately or mark anything paid outside Handy; Handy refuses both.
  • The client can accept, discuss or decline. If they accept, the difference is charged to their card.
  • If they decline before the return is lodged, the return ends, because you cannot lodge a return you know is incomplete, and what you keep follows the stage schedule (section 8A). After lodgement, declining leaves the return as it is, and Handy support reviews any refund request.
  • If the work turns out smaller than described, the difference goes back to the client in full.
  • Do not begin chargeable work beyond the agreed scope without the client's agreement.

For your own clients, you agree scope changes with them on your own terms.

6. Your prices

You set your own prices. We do not set them, cap them, or suggest them, and we will never show you what other accountants on the platform charge.

The price you enter is the price the client sees and pays, including any GST or VAT you charge. You may change your prices at any time; a change applies to new engagements, never to one already priced.

Some clients cannot be priced from a standard rate card: today, a crypto return whose transaction volume the client can't describe. For those you set a price by hand for that engagement, and Handy shows you our fee on it before you send it. The terms in this agreement apply to those engagements in exactly the same way.

7. Our fee

On clients Handy introduces to you: 15% of the price, excluding any GST or VAT you are registered for.

The client pays your price, including any GST or VAT. If you are registered for GST or VAT in the country of the return, Handy's fee is 15% of the price excluding that tax; if you are not registered there, 15% of the full price. You receive the balance. You must tell us whether you are registered in a country before you can be matched there.

The fee follows the client, not the invoice. It applies to every return for a client Handy introduced to you, however that return is priced, invoiced or paid, whether the price comes from your rate card, a quote you set by hand, or a new price agreed through Change the price.

On your own clients: nothing. An own client is:

  • a client you, or anyone in your firm, added to Handy; or
  • a client who named you as their accountant when they signed up.

An own client stays your own on every later return with your business. You may use Handy to manage, document, invoice and file for your own clients at no charge: no percentage, no per-client fee, no subscription. If we ever intend to charge for this, it will be by a new version of this agreement that you accept, never by a change to a setting.

The rate is the same for everyone. 15% applies to all accountants on the same terms. It is not negotiated per client, per engagement or per case. We may change it only by issuing a new version of this agreement for you to accept.

Work already priced keeps its rate. If you accept a new version at a different rate, engagements priced before that acceptance continue at the rate in force when they were priced.

You always see it. The fee is shown to you before you set your prices and on every payment you receive. The client sees one total price and is not shown our fee separately.

8. How you get paid

For clients Handy introduces, payment is taken through your own Stripe account, which you connect during onboarding. The client pays you directly; Handy never receives or holds the money. Our fee (section 7) is taken by Stripe at the moment the client pays, and the balance settles to your account on Stripe's normal schedule. Stripe's own card fees also come out of your payments.

Stripe provides the payment service, under its own terms with you. Handy does not receive or hold client money at any point. Handy's software instructs Stripe to hold, take, release and refund payments on your Stripe account, as this agreement describes.

You are the merchant of record. The client contracts with you. You are responsible for your own Stripe account, including keeping its verification current. You must complete your payment setup before you can be matched.

A payment belongs to the business it was paid to, your firm or you if you work alone, even if the return later moves to another accountant.

The hold and the charge. When a client matched to you accepts your terms, their card is held for your price and charged as section 4 says, or at once if you have already confirmed or the 12 hours have passed. If the engagement does not go ahead before the charge, the hold is released, which is a cancellation rather than a refund.

We issue your invoices and credit notes, as your invoicing agent. You appoint us to prepare and issue invoices, and credit notes or adjustment notes as applicable, to clients in your name, from a unique number sequence that is yours. They remain your documents. You give us, and keep accurate, every business and tax detail they must carry, including your GST or VAT registration, and you check them. Invoices are issued when payment is taken, and every refund produces a credit note or adjustment note. Do not issue a second invoice for the same supply. Both of us keep copies and the records behind them.

Invoice errors. Tell us within 5 working days of finding an error in a document issued in your name, and we correct it with a credit note or a reissued invoice. Tax, interest or penalties caused by details you gave us, or failed to update, are yours. Those caused by our issuing a document wrongly despite accurate details are ours. We never decide your tax status; we use what you tell us.

  • For clients Handy introduces, do not issue your own invoices for the same work. Handy refuses manual invoices and "mark as paid" for them (section 5).
  • For your own clients, you may switch our invoicing off and issue your own.

Our fee statements. Once a month, per currency, we issue you a fee statement for the fees taken from your payments in that calendar month (UK time). It is billed to your business and shown as already paid, because Stripe took the fee from each payment. When a refund returns part of our fee to you, we issue you a separate credit note; it is never netted into a statement.

Pay Now (optional). Pay Now is the card button on invoices to your own clients. The firm owner, or you if you work alone, switches it on for the whole business, or Handy support does at the business's request. It needs a Stripe account that can take charges and your answer on GST or VAT registration. A client without a login can pay one invoice from an emailed link, which ends when the invoice is paid, cancelled, credited or sent again. New prices for clients Handy introduced are always charged through Change the price, whether Pay Now is on or not.

8A. Refunds, chargebacks and changing accountant

The refund schedule. For clients Handy introduces, refunds follow the stage schedule in the client terms you adopt (section 8B): what you keep depends on how far the return got when the client cancels or declines a new price. Inside a UK or EU client's 14-day cancellation period, you keep only the work you can document, never more than that stage's share. The shares are payment for work completed, so keep a record of the work behind each stage.

Our fee on refunds.

  • On a refund made through Handy, our fee comes back to you in the same proportion, with a credit note from us.
  • On a refund you make in your own Stripe dashboard, Handy records it and credits it to the client, and our fee is not returned. To have our fee back in proportion, make the refund through Handy.
  • Stripe's card fees are never returned.

Refunds at your discretion. The firm owner or an admin, or you if you work alone, may refund any amount up to what is left on a payment, with our fee back in proportion. We monitor full refunds you make at your discretion to clients Handy introduced, because a full refund followed by payment outside Handy is the route around our fee (section 12).

Chargebacks and disputes land on your Stripe account and are yours to answer. Any amount lost to one is yours, including our fee on that payment, unless our breach, negligence or a payment-administration error by us caused it, such as a duplicate charge, a wrong automatic charge or a cancellation we failed to process. Then the loss, including our fee, is ours.

Releases. What happens after a client's card is charged depends on why you stop working on the return:

  • You are at fault, you withdraw without a sound professional reason, or you cannot continue for a reason on your side, such as illness: the client is refunded in full and you keep nothing.
  • You withdraw because of the client's conduct, where it seriously obstructs the work, such as abuse, persistent failure to cooperate, or concealing something that creates a conflict: it is treated as the client cancelling, and the stage schedule applies. Keep a record of what happened, and warn the client and give them a chance to put it right first, unless that would be unsafe, unlawful or against your professional obligations. Handy may adjust the outcome if you contributed to the breakdown, and the client's rights by law are unaffected.
  • Handy releases you through no fault of yours, or a platform failure stops the work: the client is refunded in full, and Handy pays you, from its own money, for the work you can document, up to that stage's share.

Withdrawal required by law or a professional obligation, for example under anti-money-laundering or sanctions rules: the client is refunded in full and you keep nothing. The client is told only that you can no longer act for them. Handy records the reason with restricted access.

Handy support decides which applies, using the same process as fault decisions. Handy admins can release you from a return only for one of these reasons.

Fault. Handy support decides whether you were at fault, using the published fault list in the client terms, for the purpose of the refund only. You receive the decision and the reasons in writing, and you may contest it once, with evidence, within 7 days. This decides the refund, not anyone's legal liability.

When a client changes accountant. A client who asks to change accountant after paying goes through Handy support. You keep your share under the schedule, unless you were at fault, in which case everything goes back. The payment stays with your business. The new accountant charges the client afresh.

8B. The client terms you adopt, and your own clients

Clients Handy introduces. For every return for a client Handy introduces, you adopt Part 2 of Handy's client terms ("Your return") as the terms between you and that client, in the version the client accepted for that return. Part 2 covers when the card is held and charged, the 14-day cancellation right, the refund schedule, full refunds, changing accountant, and consent for tax identifiers and for client data moving with the return.

Part 2 binds you for those returns from the moment the client accepts it.

Each return records the version of Part 2 its client accepted and when. Every version of Part 2 stays published on Handy's website, so you can read the exact text. Your engagement letter may add scope, deadlines and professional disclosures. Where it conflicts with Part 2, Part 2 applies, and it may not take away anything Part 2 gives the client.

Your own clients. Part 2 does not apply to your own clients (section 7); your own terms do. Because you use Handy to hold their information, tell them so, normally in your engagement letter or privacy notice, including that the data is stored in Ireland. You may use this paragraph:

We use Handy, a platform run by HandyApp Ltd (a UK company), to manage our work with you: your documents, messages, tasks, invoices and payments, and your tax identifier if you choose to give it. Your information is stored in Ireland, and Handy handles it on our instructions; it does not use it for its own commercial purposes, marketing or advertising, and processes it only to run, secure and support the platform and to meet its legal duties. Handy's privacy policy is at handyapp.ai/privacy. Using Handy is part of how we provide our services under this engagement, and by accepting this letter you acknowledge it.

Permission under your professional rules. Where your professional rules require a client's permission before a third party holds their information, get it. For Australian clients, get written consent before their information goes on Handy, on the standalone form Handy provides or in your own engagement letter if it covers the same points. Either way, it names HandyApp Ltd and says what Handy holds, why, where it is stored, who else receives it, how long it is kept, and how to withdraw consent for the future. When you add an Australian client, or an Australian return for an existing client, Handy asks you to confirm that you hold that consent, and records your confirmation. When an Australian client you added first signs in, Handy shows them the standalone consent and records their agreement before they can upload, send or answer anything. Keep evidence of each consent, and give us a copy within 5 working days if we ask. Optional features, such as sharing past returns with a later accountant, have their own consent.

Emails we send for you about your clients' returns go out in your name, with a link to Handy's privacy policy. Sign-in emails, such as a sign-in link or a password reset, come from Handy. We never contact your own clients for our own purposes, including marketing or inviting them to use Handy for anything else.

9. Tax and your own affairs

You are self-employed or a firm, not our employee, worker, agent or partner. Nothing here creates an employment relationship or a partnership.

Your own taxes are yours: income tax, corporation tax, VAT or GST, social contributions, everything. We take nothing from what you receive beyond the fee in section 7; Stripe's card fees are Stripe's.

Our fee statements (section 8) are the documentation for our fee. We add VAT, GST or any other indirect tax to our fee where the law requires it; where a reverse charge or similar rule applies, you account for it. Give us, and keep current, your business address, tax status and any VAT or GST registration number or ABN. Where you owe VAT or GST on your own services, you account for it.

Platform reporting. Where the law requires it, we report your details and what clients paid you through Handy to HMRC, under the UK reporting rules for digital platforms, and to the Australian Taxation Office, under the sharing economy reporting regime. Give us the details those rules need, and keep them up to date: your legal name, address, date of birth if you're an individual, your UTR, National Insurance number, company number or ABN, and the bank account you're paid into.

10. Clients and their information

Client information reaches you so you can do the work. Use it for that and nothing else. Keep it confidential. Do not sell it, share it, or use it to market anything other than the services you were engaged for. Apply at least the security you would apply to your own client files, and comply with the data protection law that applies to you.

Who is responsible for what.

  • For our own activities (accounts, matching, billing, security, fraud prevention, legal compliance, support, refund and fault decisions, payment administration and our own records), we are an independent controller.
  • For the work on a return, you are the controller.
  • We act as your processor under the Schedule for the professional content of every return you work on through Handy, whether we introduced the client or you did: documents, messages, tasks and return data, and saved tax identifiers.

Tax identifiers. Handy can store a client's own tax file number, National Insurance number or UTR for you, never a partner's or anyone else's, as your processor. Ask for one only through Handy's tax-identifier task, once you hold the client's return: for a client Handy introduces, after they accept your terms. The client chooses whether to give it, and Handy records their agreement to share it with you. It is held only for your authorised tax purposes. Besides the client, only you can reveal it, while you hold that return and for 30 days after it is filed or closed. Each reveal is recorded, and the client can see who opened it. No Handy screen, tool or export shows it to our staff. While no accountant the client has shared a UK number with can open it, for example after they change accountant, Handy holds it for the client, not for you. Handy's copy is deleted:

  • 30 days after the client's last return in that country is filed or closed;
  • at once, if the client deletes it; or
  • within a day of the client closing their account; or, for a tax file number, within a day of the last accountant the client shared it with losing access to it.

Handy's copy is a secure hand-over, not your record: keep what your professional rules require in your own systems.

Do not ask for tax identifiers in messages; use the tax-identifier task.

When a client moves to another accountant:

  • what the client uploaded moves with the return, once the client confirms;
  • your files, internal notes and messages stay with your business, and, if the client paid you, you keep read-only access to your own work and payment records;
  • you can no longer open the client's saved tax identifiers; the new accountant can once the client agrees to share them. A tax file number is deleted instead, and the new accountant asks again.

If you work from outside the UK or EU, client data reaching you is an international transfer, and the transfer terms in the Schedule apply.

Tell us without delay if client information you hold through Handy is lost or exposed. We will tell you within 24 hours of becoming aware of any breach affecting data we hold for you, with what we know so far, and update you as we learn more.

11. Conduct

Communicate with clients through the platform, so there is a record. Be straightforward with them about what you are doing and what it costs.

Do not misrepresent your credentials, your experience, or what you are registered to do. Do not use the platform to solicit clients for anything unrelated to the work.

12. Clients we introduce

Clients we introduce to you are introduced on the basis that the work runs through the platform.

For 18 months after a client's last return with you on Handy, if you, or anyone in or working for your firm, solicits or accepts that client for tax-return work substantially similar to what you did for them on Handy, and does that work outside Handy, you pay us a conversion fee equal to our fee on that client's last return through Handy, once. Tell us when it happens. The fee is due 30 days after our invoice, and the client becomes your own client once it is paid. It is our fee on that last return after any refund, plus any VAT or GST the law requires. It is a fee under this agreement, not damages, so the limits in section 14 do not reduce it. This section does not apply if Handy stops operating, or has materially breached this agreement and not put it right.

A client is always free to leave Handy, and we will not stand in their way. The conversion fee is between you and us; it never falls on the client.

This section does not apply to your own clients (section 7), or to a client you already worked with before we introduced them.

A client we introduced stays introduced for as long as they work with you through Handy, so our fee applies to each of their returns, until you pay the conversion fee for them. After that, they are your own client.

13. Ownership

The platform, its software, its content and its brand remain ours. You may use them while this agreement is in force, for the purpose of doing the work.

Your work product and your client files remain yours and your client's. We do not claim ownership of anything you produce.

We show clients your business identity before they accept your terms (section 4); that is required to be matched. Beyond that, we may use your name, professional title, credentials and general practice information to introduce you to prospective clients. Tell us if you want that wider use stopped and we will stop it.

14. Liability

Neither of us excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

We are not liable for your professional work. If a client suffers loss because of advice you gave, a return you filed, or a deadline you missed, that is yours, and you will indemnify us against claims brought against us arising from it.

If a claim is brought against us that this indemnity covers, we will tell you promptly, let you control the defence at your cost, give you reasonable help, take reasonable steps to limit the loss, and not settle without your consent, which you will not unreasonably withhold. The indemnity does not cover loss to the extent we caused it.

You are not liable for our platform. If the platform fails, loses data, or misroutes a payment through our fault, that is ours, and we will indemnify you against a client's claim against you arising from it, to the extent we caused it and within the limits below. The claims procedure above applies to it, with our roles swapped.

Subject to the first paragraph, neither of us is liable to the other for lost profits, lost business or indirect loss. Each of our total liability to the other in any twelve-month period is limited to the greater of the fees we retained from your engagements in that period and £250,000. Liability for breaches of confidentiality, data protection or security has a separate limit: the greater of three times those fees and £1,000,000. Neither limit applies to fraud, wilful misconduct, unlawful use of data, or anything that cannot lawfully be limited. Your indemnity for professional work is not subject to these limits.

Leaving your professional-work indemnity outside these limits is deliberate: loss from professional work is what your professional indemnity insurance is for.

Hold professional indemnity insurance appropriate to your work throughout, and show us the certificate if we ask.

15. Suspension and ending this agreement

You may leave at any time, by telling us. Finish the returns you have already confirmed, or ask us to release you from them (section 8A). Leaving does not release you from section 12.

We may suspend you immediately if we reasonably believe a credential, registration or supervision has lapsed, a client is at risk, or you have seriously breached this agreement. We will give you our reasons promptly, and you can respond. We review a suspension regularly and lift it when the reason has gone; where a breach can be put right, we give you a reasonable time to do so. While you are suspended, we may release you from open returns, with the refund that follows under section 8A.

Either of us may end this agreement on 30 days' notice. Returns already confirmed continue to completion under these terms unless they are released, and you are paid for them normally.

Sections 10, 12, 13 and 14 and the Schedule continue after this agreement ends.

16. Changes

We change this agreement by issuing a new version. We do not change the terms of a version you have already accepted. Every new version comes with a summary of what changed, sent to you by email and shown in Handy.

Material changes are changes to our fee or the conversion fee, to how and when you are paid, to clients' rights, to the term or ending of this agreement, to data, liability or indemnities, to governing law, or to your regulatory duties. A material change applies to you only when you accept it by an express action. Until you do, the version you accepted continues to apply to you, and engagements priced under it stay priced under it; we will not match new clients to you, and you cannot add new clients or new returns; and your existing engagements continue to completion under the version you accepted.

Minor changes are administrative or formatting changes, or changes that only benefit you. We will tell you about a minor change at least 30 days before it applies. You can accept it sooner. If you carry on using Handy after the date we give you, the new version applies to you from that date. If you do not want it to, you can leave before then (section 15).

If you are a firm, the firm's owner accepts new versions for the firm.

Moving from version 4 to version 5. Returns paid before your business accepts this version keep version 4's terms. Handy's refund schedule applies only to returns whose client accepted the new client terms after your business accepted this version.

17. General

This is the whole agreement between us about the platform, and it replaces anything said before it.

If any part of it cannot be enforced, the rest still stands.

Neither of us may transfer this agreement without the other's consent, except that either of us may transfer it, with written notice to the other, to a business that acquires all or most of their own business. A business that acquires yours can be matched only once we have verified it (section 3).

Nobody outside this agreement can enforce it, except data subjects under the transfer terms in Annex B.

English law governs this agreement. The courts of England and Wales have non-exclusive jurisdiction, so either of us may also bring proceedings in any other court that has jurisdiction.

18. Contact

Questions about this agreement: support@handyapp.ai

HandyApp Ltd · Company number 17153591 · 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE

Schedule: data we process for you

  1. Roles. For the data in paragraph 2, you are the controller and HandyApp Ltd is your processor.
  2. Data covered. The professional content of every return you work on through Handy, for clients we introduce and your own: documents, messages, tasks and return data, and saved tax identifiers while the client has shared them with you. Handy remains an independent controller for its own account, matching, billing, security, fraud-prevention, legal-compliance, refund and fault-decision, and platform records about the same people.
  3. Purpose. Providing Handy to you: storing and displaying return content, enabling tasks and messages, sending communications in your name on your instructions, recording approvals, managing documents, administering invoices and payments where applicable, and holding a saved tax identifier for you and releasing it only as section 10 allows.
  4. Types of data and people. Identity and contact details, tax information, documents, messages, tax identifiers and payment records, about your clients and others named in their records.
  5. Duration. For as long as this agreement is in force, and afterwards for the retention periods in paragraph 14.
  6. Instructions. We process the data only on your documented instructions, which are this agreement and the Handy features you use. We will tell you if we believe an instruction breaks the law.
  7. Confidentiality. Everyone at Handy with access to the data is bound to confidentiality.
  8. Security. We maintain appropriate technical and organisational measures. Annex A lists the controls in place, and only those; we update it as controls change.
  9. Sub-processors. You authorise our current sub-processors: Supabase (database and file storage, Ireland), Vercel (hosting, Ireland), Stripe (payments, United States), Resend (email, United States), Google (sign-in, United States and other countries), Google Workspace (our support and privacy mailboxes, Europe for storage, other countries for processing) and Anthropic (Claude, an AI assistant our staff use to help run, support and fix Handy, United States). We will give you 30 days' notice before adding a new one; one replaced for security or legal reasons may change at once, with notice as soon as possible. If you object, you may end this agreement. Each sub-processor is bound by written terms giving the same protection as this Schedule, and we remain responsible for them.
  10. Your clients' rights. We pass any request from your clients about their data to you straight away, and help you answer it at no charge.
  11. Breaches. We will tell you within 24 hours of becoming aware of a breach affecting the data, with what we know so far, update you as we learn more, and help you with any notification to a regulator or to clients.
  12. Assistance. We help you meet your security obligations, and with any data protection impact assessment or prior consultation with a regulator that concerns the data.
  13. Compliance information and audits. We give you the information needed to show we comply with this Schedule, and allow audits and inspections on reasonable notice.
  14. Return and deletion. At the end of this agreement, at your choice, we export the data to you or delete it, within 30 days of your written request. While the agreement runs, your clients' documents are kept for at least 6 years after a client's last return with you, and never deleted earlier without your instruction. Tax identifiers follow section 10. Deleted data leaves our database backups within 7 days, and those backups are kept isolated and restored only for disaster recovery. Elsewhere: copies in emails we have sent are deleted by our email provider within 30 days of sending, and leave its backups 7 days after that; copies in our support and privacy mailboxes leave Google's systems within 180 days of our deleting them; and copies in our AI assistant are deleted within 30 days of our deleting them, unless Anthropic must keep them longer under its usage policy or the law.
  15. Where the data is processed. In Ireland, and at the locations of the sub-processors in paragraph 9.
  16. International transfers. Where you are outside the UK or the EU, Annex B applies to data reaching you.
  17. Australia. For Australian clients' data, we use tax file number information only for your authorised taxation purposes, with no secondary use; restrict access to it to people who need it for those purposes; destroy or permanently de-identify it when it is no longer required by law; meet obligations equivalent to the Australian Privacy Principles and the Privacy (Tax File Number) Rule; pass the same obligations to our sub-processors; cooperate on any breach, including under the notifiable data breaches scheme; and give you the information you need about overseas recipients, so you can meet your own obligations for data held in Ireland.

Annex A: Security controls

The controls in place when this agreement takes effect.

  • Location: Database and file storage in Ireland (Supabase, eu-west-1); a file someone opens can be cached on Supabase's delivery network near them. Application servers in Ireland (Vercel, Dublin); requests pass through Vercel's global network, so a data centre near the user can handle a request, including the sign-in check, before it reaches Ireland.
  • Encryption: Every connection over HTTPS. Database and file storage encrypted at rest by the hosting provider, at the infrastructure level; this is not field-level encryption. Clients' tax identifiers are also encrypted field by field (below).
  • Access to client data: Row-level security is on for every database table signed-in users can write to, checked automatically on every deployment. An accountant reaches a return's data while it is assigned to them, and read-only after it closes, and the profile of a client they act for. An accountant offered a return sees its summary before accepting, a client can choose to share their past returns with their current accountant, and a firm's owners and admins see the profiles of the firm's clients. Documents are reached only through links the server signs after checking that access. After a change of accountant on a paid return, the first business keeps read-only access to its own work up to the change; the new accountant does not see that business's files, internal notes or messages, and the return's tasks stay with the return. After a client closes their account, the accountant who filed and their firm's owners and admins keep read-only access to those returns. Handy staff do not read internal notes.
  • Storing tax identifiers: Tax file numbers, UTRs and National Insurance numbers saved in Handy's tax-identifier field are encrypted by the application (AES-256-GCM) with keys held outside the database, so the database and its backups hold only scrambled values of them and their last four characters. Numbers inside uploaded documents, or typed into a message, are not covered by this. No browser session can read the store directly: values are released only by server functions that check who may reveal them.
  • Who can reveal a tax identifier: Only the client, and an accountant the client agreed to share it with while holding that return (up to 30 days after it is filed or closed), can reveal one; no Handy screen, tool or export shows one to staff. Each reveal is logged before the value is returned, and the client sees who opened it. Only the server creates or changes tax-identifier tasks.
  • Tax identifiers in logs, and deletion: Values are never written to logs, which a test checks on every build, and the store is excluded from admin data exports. A daily job deletes each one 30 days after the client's last return in that country is filed or closed, and after the client closes their account; the client can also delete it at any time.
  • Admin access: Admin accounts require two-step sign-in, enforced in the application and in the database. Admin changes are recorded in an append-only audit log. Admin data exports are logged. Document opens by admins and by accountants are logged.
  • Acceptance records: Acceptances of terms and consents are written only by the server, with the server's time, never by the user's browser.
  • Sessions: The sign-in cookie is sent only over HTTPS.
  • Payments: Card details are handled by Stripe and never stored by Handy. Clients' payments are charged on the accountant's own Stripe account.
  • Backups: Database backed up daily; each backup kept 7 days.

Annex B: International transfers

The transfers this agreement involves, and the terms that protect them.

Transfer 1. Handy's own records about a client it introduces (contact and matching details), shared with an accountant outside the UK or EU.

  • Exporter to importer: Handy (UK, data in Ireland) to the accountant.
  • Roles: independent controller to independent controller.
  • Mechanism: the transfer terms below, module 1.

Transfer 2. Return content Handy processes for an accountant outside the UK or EU (Schedule), for every client, when they access it.

  • Exporter to importer: Handy to the accountant.
  • Roles: processor to controller.
  • Mechanism: the transfer terms below, module 4.

Transfer 3. Sub-processors outside the UK or EU (Stripe and Resend, United States; Google, United States and other countries; Google Workspace, for our support and privacy mailboxes, Europe for storage, other countries for processing; Anthropic, for Claude, an AI assistant our staff use to help run, support and fix Handy, United States).

  • Exporter to importer: Handy to the sub-processor.
  • Roles: controller or processor to processor.
  • Mechanism: the sub-processor's own transfer terms or an adequacy route, flowed down under Schedule paragraph 9. Handy is responsible for these transfers and their risk assessments.

Transfer 4. Australian clients' data held in Ireland.

  • Exporter to importer: the Australian accountant to Handy.
  • Roles: overseas disclosure under Australian law.
  • Mechanism: Schedule paragraph 17.

The transfer terms. For transfers 1 and 2, you and Handy enter into the following terms, which are incorporated into this agreement by reference:

  • the EU clauses: the standard contractual clauses in the Annex to Commission Implementing Decision (EU) 2021/914 of 4 June 2021, module 1 for transfer 1 and module 4 for transfer 2; and
  • the UK Addendum: the International Data Transfer Addendum to those clauses issued by the Information Commissioner, version B1.0, in force 21 March 2022, with Part 2 (the mandatory clauses) of the approved Addendum laid before Parliament on 2 February 2022, as revised under its Section 18.

When they apply. The transfer terms apply to a transfer only to the extent the law requires a safeguard for it: the UK Addendum where UK data protection law applies to Handy's processing and no UK adequacy regulations cover your country, and the EU clauses where the EU GDPR applies to Handy's processing and no EU adequacy decision covers your country.

Choices made in the transfer terms.

  • Clause 7 (docking clause): not used.
  • Clause 11(a), the option of an independent dispute resolution body: not used.
  • Module 4, whether Handy combines data it receives from you with data it collects itself: yes, so Clauses 14 and 15 apply to transfer 2.
  • Clause 13 and Annex I.C (module 1): the competent supervisory authority is the one Clause 13(a) designates for Handy. Under the UK Addendum, it is the Information Commissioner.
  • Clauses 17 and 18 of the EU clauses, for both modules: the law and the courts of Ireland. Under the UK Addendum, the law and the courts of England and Wales, as its Section 15 provides.
  • Table 4 of the UK Addendum: Handy, as exporter, may end the UK Addendum under its Section 19.
  • Signature: accepting this agreement under section 1 has the same effect as signing the transfer terms, including Annex I.A and Table 1 of the UK Addendum.

Annex I.A: the parties.

  • Exporter: HandyApp Ltd, company number 17153591, 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE, privacy@handyapp.ai. Controller for transfer 1 and processor for transfer 2. Its activity is running the Handy platform.
  • Importer: you, with the details we record when you accept this agreement (section 1). Controller. Your activity is preparing and lodging tax returns, and the related services, for your clients.

Annex I.B: what is transferred. For transfer 1:

  • people: clients Handy introduces to you;
  • data: their name and contact details; the countries, tax years and services they asked for; their answers to Handy's questions; the price; and their acceptance of your terms. No special category data;
  • how and how often: made available to you in Handy, and in emails Handy sends you, whenever a client is matched to you or you open their details;
  • purpose: deciding whether to take the client on, including your conflict, sanctions and anti-money-laundering checks, and providing the services they engage you for;
  • how long you keep it: while you act for the client, and afterwards for as long as your professional and legal record-keeping rules require.

For transfer 2:

  • people and data: as in Schedule paragraphs 2 and 4. Handy doesn't ask for special category data, but documents clients upload can contain some, such as medical expenses, and they get the protection in Annex A;
  • how and how often: stored by Handy for you and made available to you in Handy, continuously while this agreement is in force;
  • purpose: as in Schedule paragraph 3, on your instructions (paragraph 6);
  • how long: as in Schedule paragraph 14.

Annex II: your security measures (module 1). For data you receive under transfer 1, you:

  • reach it only through your own Handy login, never a shared one;
  • give access only to people in your business who need it for the work and are bound to confidentiality;
  • keep any copy outside Handy only on devices and systems that need a sign-in, get security updates and are encrypted at rest;
  • delete copies securely once your record-keeping rules no longer require them; and
  • tell us without delay of any breach affecting it (section 10).

Handy's own measures are in Annex A.

Risk assessment. Handy, as exporter, makes the assessment the transfer terms require for transfers 1 and 2 (under UK law, the data protection test), and you give Handy the information it reasonably needs for it.

Telling clients, and copies. Handy tells clients about these transfers on your behalf, in its privacy policy and by showing them your identity before they accept your terms (section 4). If a client asks either of us for a copy of the transfer terms as completed here, Handy provides it, free of charge.

Precedence. If anything in this agreement conflicts with the transfer terms, the transfer terms prevail.

Accountants accept this agreement in their Handy account, at the agreement step. How we handle your data: handyapp.ai/privacy

HandyApp Ltd · Company No. 17153591 · handyapp.ai