Lisa Join the pilot
Menu
Privacy

How Lisa uses your information.

Version 2026-10-03. Plain words, and true of Lisa as it runs today.

1. Who we are

Lisa is made and run by Whitfield Hanson Accountancy Ltd (company no. 16778779, registered in England & Wales; registered office Meadow View, Thorpe in Balne, Doncaster DN6 0DY). We are the data controller for the information described here, except where section 3 says we act for a business. We are registered with the Information Commissioner's Office, registration ZC208178. Questions, or anything you want us to do with your information: henry@getlisa.co.uk, or ask Lisa in the app.

This notice covers four groups of people: people who use the Lisa app for their business (section 2), the customers Lisa texts on a business's behalf (section 3), people who visit this website or sign up for the pilot (section 4), and people who used Lisa for a 2025-26 tax return (section 6).

2. If you use the Lisa app for your business

What we hold

Why, and our lawful basis

To provide the service you've signed up to: answering and booking for your business, invoicing, keeping your books and working out your tax pot. That is processing necessary for our contract with you. Some records must be kept because tax law requires it, which is a legal obligation (section 7). And we have a legitimate interest in keeping Lisa secure, finding out what has gone wrong when it does, and making her better, using your information for nothing else.

How the AI fits in

Lisa uses artificial intelligence (a language model, Claude, provided by Anthropic) to read what you and your customers write and send, and to write her replies. The sums are done by Lisa's own code, not by the AI. Before the messages you type reach the AI, Lisa's code removes National Insurance numbers, tax references (UTRs), bank account and card numbers and phone numbers. Photos and files you send (a receipt, a bank statement) are read as they are, because reading them is the point. Anthropic processes all of this under contract to us and does not use it to train its models.

3. If you're the customer of a business that uses Lisa

If you called or texted a business that uses Lisa, booked it through its online booking page, or it did a job for you, she may text you on its behalf, as "Lisa from" that business: about a quote, your booking, a reminder the day before, a text when they're on their way, your invoice, and a reminder if the invoice is overdue. If the business has switched it on, she may also text you once, after you've paid, asking for a review; reply STOP and she won't text you again. She always says she is its assistant. If you text outside the business's working hours, she may tell you they're off and when they'll get back to you, and that replying URGENT passes your message on as urgent straight away. The business can also reply to your texts itself from the same number, signed with its own name. You may also be sent a private link to your own page with that business: your bookings, the quotes and invoices it has sent you and what you've paid, and nothing else. Anyone with the link can open it, so keep it as you would the invoices themselves; the business can replace it, and it stops working if the business leaves Lisa. Lisa may use one number for several businesses; each text says which business it's from, and your reply goes only to that business. If more than one of them has texted you, she asks you which one you mean before passing your reply on.

For this information the business is the data controller and we process it for them, on their instructions and under a written contract (our terms, section 8). We don't use it for anything of our own and never market to you. Text STOP and Lisa won't text you again for that business (on a number she uses for several businesses, for any of them). To see, correct or delete what's held about you, ask the business, or email us and we'll pass it on and help.

4. If you visit this website or sign up for the pilot

This website sets no cookies, runs no analytics and loads nothing from anyone else: even the font comes from our own server. Our hosting provider keeps the usual short-lived server logs (such as the IP address a request came from) to keep the site running and secure.

If you fill in the pilot form we hold your name, trade and mobile number, which page you signed up on, and the tags on the link you followed (such as which ad). We use them only to contact you about the pilot: a message and an email go to our two directors so we can send you the app and help if you get stuck. Our lawful basis is that you've asked us to (steps before a contract) and our legitimate interest in running the pilot. A sign-up is deleted 12 months after it was made; if you become a user, what we need moves into your account.

5. Who else sees it

Our two directors. And the companies that run parts of Lisa for us, who act under contract and can't use your information for themselves:

Where information goes to the United States, it is protected by the UK's approved safeguards for international transfers. We never sell information, and never use one business's or customer's information to market to anyone else. The law sometimes requires us to make reports, for example to prevent fraud or money laundering, without telling you.

6. If you used Lisa for a 2025-26 tax return

For the £99 tax return we also hold your tax details (UTR, National Insurance number, your HMRC obligations and what goes on your return; the UTR and NI number are encrypted), your bank statements and the transactions in them, and the identity documents (photo ID and proof of address) the Money Laundering Regulations require us to check and keep. A person at Whitfield Hanson, not software, checks every tax return before it is filed, and you approve your own return in writing before it goes anywhere. Your engagement letter is at /engagement-terms.

7. How long we keep it

8. Your rights

You can ask for a copy of your information, ask us to correct it, ask us to delete it where the law doesn't require us to keep it, ask us to limit what we do with it, have it in a form you can take elsewhere, and object to the legitimate-interest uses above. Email henry@getlisa.co.uk or ask Lisa; we answer within a month. If you're unhappy with how we've handled your information you can complain to the Information Commissioner's Office (ico.org.uk).

9. Decisions

No decision with a legal or similarly significant effect on you is made by software alone. Lisa suggests and drafts; the business decides, and approves bookings and new kinds of message before they go.

10. Keeping it safe

The website, the app and our servers only talk to each other over encrypted connections. Connection details for your accounting software and HMRC, and tax references, are encrypted where they're stored, and only our two directors can see client information. Text messages to and from your customers are ordinary SMS, like any text. If you add your diary to your phone's calendar, your calendar app (Apple, Google or Microsoft) fetches your jobs, with your customers' names, mobiles and addresses, from a private link only you have; you can replace that link in the app at any time, and the old one stops working. Photos you add to a job are kept privately, never at a public link, and Lisa removes the location your phone stores inside a photo before keeping it. If you think you've found a security problem with Lisa, email henry@getlisa.co.uk with SECURITY in the subject: reports are read the same day.

11. Changes

When Lisa changes what she collects or who she shares it with, this page changes with her, and the version at the top changes. If a change matters to how we use your information, we'll tell you in the app first.