You’re connecting financial and communication systems — here’s exactly how CollectAK treats that, in plain English.
Connecting Xero (or any future connection) uses that provider's own sign-in and consent screen. CollectAK never asks for your account password.
The access tokens a connection gives us are encrypted before they're ever stored — never held as plain text.
Every figure CollectAK shows you can be traced back to the real record it came from — an invoice, a message, a comment — never a number floating with no origin.
If CollectAK cannot establish enough evidence, it says so, rather than treating a guess as a fact.
Information from your connected accounts is used to answer your own question — where is your unfinished money — not to train anything else.
Removing a connection is always available, and stops CollectAK from accessing that source.
What you see is written for a business owner, not a developer — no raw data, no internal identifiers, no system logs.