Privacy notice

Who we are

The controller for personal data processed through this service is Dueboard, operated at dueboards.com. Dueboard is independent software for UK bookkeepers and sole practitioners. It is not affiliated with or endorsed by Companies House, and Dueboard is not registered as a Companies House company for this product.

Questions about this notice or your data: dueboard@agentmail.to only. We do not offer live chat or phone support.

What Dueboard does

Dueboard helps you import company numbers and see accounts and confirmation-statement (CS01) deadlines on one board, with estimated Companies House late-accounts penalties in pounds for private companies and LLPs. Confirmation statements are shown as dates for chase only — there is no automatic CS01 late-filing tariff equivalent to the accounts penalty. Companies House already sends free filing reminders per company; Dueboard’s job is the portfolio board across your client list.

Data we process

• Account data — email address, password hash, optional name, plan, and related authentication session cookies.
• Watchlist / board data — company numbers you add or import, cached company profile and filing summaries from the Companies House public data API, and in-app deadline or filing notices.
• Support messages — name, work email, optional company, and message text if you use the contact form.
• Billing — if you upgrade to Solo (£12/month for up to 120 companies; Free covers 3), Stripe processes payment details. We store Stripe customer and subscription identifiers and plan status — not full card numbers.

Companies House public data

When a Companies House API key is configured, Dueboard looks up company profiles and filing history from the Companies House public data API. That data is public company information. We cache it to power your board and do not invent filings if the API is unavailable.

Why we process data (lawful bases)

• Contract — to create and run your account, board, alerts, optional calendar feed, and paid Solo plan.
• Legitimate interests — securing the service, preventing abuse (including rate-limiting support), and understanding operational reliability.
• Legal obligation — where tax or accounting rules require retention of billing records.

Processors and hosting

• Hosting and delivery via Vercel.
• Account and watchlist storage in a managed database (Turso / libSQL).
• Paid plans via Stripe.
• Optional email or webhook delivery for support tickets when configured.

Some processors may store or process data outside the UK. Where that happens, we rely on appropriate transfer mechanisms offered by those providers.

Retention

We keep account and board data while your account is active. You may ask us to delete your account by emailing dueboard@agentmail.to. Support tickets and billing records may be kept longer where needed for security, dispute handling, or legal retention.

Your rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. To exercise these rights, email dueboard@agentmail.to. You may also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use essential cookies for signed-in sessions (Auth.js). We do not run third-party advertising trackers on the marketing pages.

Changes

We may update this notice as the product changes. The date at the top will change when we do. Continued use after an update means you have read the revised notice.