You're about to trust me with your books.
So ask me the hard questions — here are the five every business owner should ask, answered straight. No legalese, no small print. — Siki 🦉
What can Sikizana see?
When you connect Xero, Siki can read your invoices, contacts, bank transactions, chart of accounts, and reports (P&L, balance sheet). It reads them on demand — when you ask a question or open the page — rather than bulk-copying your organisation into our database. Until you connect, everything you see is sample data from a fictional business.
What can Sikizana change?
Nothing, without you. Every write is behind an explicit approval: a journal entry only posts to Xero when you click Approve on its card (the AI literally has no ability to post — the button is the only path), and chase emails — Zana's department — only go out for invoices where you clicked Auto-chase. Anything posted can be reversed with one tap.
Who else sees my data?
Your questions and the Xero data needed to answer them are processed by our AI providers (NVIDIA, with Venice AI as backup) to generate responses — they don't use your data to train models. Receipts you upload are read by Google Gemini Vision. Chase emails and digests are delivered by Postmark. When Siki looks up HMRC guidance, only pre-written generic search queries leave our server — never your text, customer names, or amounts. Nobody else. No advertisers, no data brokers, no selling — ever.
How is it protected?
Your Xero access tokens are encrypted at rest. Everything is scoped to your private session — one visitor can never see another's books. All traffic runs over HTTPS. Payments are handled by Stripe; we never see card numbers.
Can I leave, completely?
Yes, in one click. Disconnect instantly revokes our access to your Xero. "Delete my data" on the Account page goes further: it revokes the connection AND erases everything we stored — conversations, activity history, chase schedules, and metrics. You can also revoke us any time from Xero's own Connected Apps settings.
The short version
Read-only until you approve an action. Encrypted, session-private, never sold, never used to train AI. One click to disconnect, one click to erase everything. Your books stay yours — I just watch them for you.
The full detail lives in our Privacy Policy. Questions? Email [email protected] — it goes to the founder, not a ticket queue. (Tiny team: one human, two owls.)