Privacy at Little Wins
Little Wins is an independent app for Xero. Contact admin@littlewins.software about your data or to request deletion.
Launch news
When you sign up, we store the email address, name, feedback and early-testing preference you provide in our Google spreadsheet. We use them to send launch news and, if you agree, ask about testing Little Wins. You can ask us to remove your signup at any time.
Your Xero workspace
We use your Xero sign-in, connected organisations and tracking categories to provide tracking rules. App state and credentials are stored in AWS in Sydney. Website traffic passes through AWS CloudFront's global network. Our email provider is Purelymail, which hosts email in the United States.
Chrome extension
The Little Wins extension reads the URL and rendered tracking-category fields on supported Xero sales invoice pages to identify the organisation and check its required tracking values. It observes invoice controls, clicks and keyboard actions to show missing values and prevent approval or sending when required values are missing. These invoice checks run locally in your browser. The extension does not upload invoice line contents, amounts, customer details or a record of your clicks and keystrokes to Little Wins.
The extension communicates with littlewins.software over HTTPS to sign in, renew its connection and retrieve your connected organisations, tracking categories and rules. Requests identify the signed-in user and relevant organisation. Chrome extension storage holds the connection token, user identifier and cached organisation rules. Temporary pairing information is held in session storage. Signing out through the extension clears its local connection and cached rules; uninstalling removes its extension storage. Server-side app data remains until deleted on request.
We use extension data only to provide and support its invoice-checking features. We do not sell it, use it for advertising or use it for credit or lending decisions. We handle extension data in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. The extension does not embed Google Analytics or Microsoft Clarity, and neither runs on Xero pages through the extension.
Operational monitoring
We use New Relic to monitor service performance and failures when server monitoring is enabled. Monitoring uses route names, timings, status codes and sanitized errors. Request and response data, cookies and credentials are excluded. Telemetry is processed in our New Relic account in the United States. This monitoring is separate from optional website analytics.
Optional analytics
If you allow analytics, Google Analytics measures visits and successful launch signups on the marketing website. Microsoft Clarity records interactions only in the signed-in app to help us understand usability. Workspace content is masked for Clarity. Clarity does not run on the marketing website. We do not intentionally send email addresses, form responses, Xero organisation names or tracking category contents to analytics services. These providers may process usage data outside Australia.
You can decline analytics or change your choice with the Cookie preferences button on pages where analytics is enabled. Necessary sign-in cookies continue to work. We retain your analytics choice in this browser.