Terms and conditions

Pipernus Terms and Conditions

Effective date: 28 July 2026
Last updated: 28 July 2026
Version: 1.0

These Terms and Conditions (“Terms”) govern access to and use of Pipernus, our cloud accounting, bookkeeping, document capture, tax and related business software, available at https://www.pipernus.app, through our mobile applications and through any related services that link to these Terms (together, the “Service”).

The Service is provided by PIPERNUS GROUP LTD, a company registered in England and Wales under company number 15880060, with its registered office at 103 Lonsdale Avenue, Wembley, England, HA9 7EW (“Pipernus”, “we”, “us” or “our”).

The Service is intended for business and professional use. By creating an account, accepting an order or subscription, or using the Service, you agree to these Terms on behalf of yourself and, where applicable, the business or organisation you represent (the “Customer”, “you” or “your”). If you do not have authority to bind that organisation, or do not agree to these Terms, you must not use the Service.

1. Eligibility and authority

You must be at least 18 years old and use the Service wholly or mainly for your trade, business, craft or profession.
You must provide accurate registration and business information and keep it current.
If you use the Service for another person or business, including as an accountant, bookkeeper, tax agent, employee or adviser, you confirm that you have valid authority to access their information and perform each action you take on their behalf.
An accountancy firm or other professional practice is responsible for the acts and omissions of its authorised users and for maintaining appropriate client engagement letters and authorisations.

2. Accounts and security

Each user must use their own account. You must not share passwords, authentication codes or other sign-in credentials.
You are responsible for keeping account details secure, configuring appropriate user roles and promptly removing access when it is no longer required.
You must notify us promptly at hello@pipernus.com if you suspect unauthorised access, credential compromise or misuse of the Service.
You must use multi-factor authentication where it is offered and follow reasonable security instructions that we provide.
You must never give Pipernus your HMRC Government Gateway password or other HMRC sign-in credentials. HMRC authorisation takes place directly with HMRC using OAuth 2.0. Pipernus may securely store the resulting access and refresh tokens for as long as necessary to provide authorised functionality, but does not collect or store your HMRC password.

3. The Service and your licence

Subject to these Terms and payment of applicable fees, we grant the Customer a limited, non-exclusive, non-transferable and revocable right for its authorised users to access and use the Service during the subscription term.

The features available to you depend on your selected plan, user role, connected services and any limits displayed at sign-up, in the Service or in an order.

We may improve, update or replace features to maintain security, comply with law or regulatory requirements, respond to changes by HMRC or third-party providers, or improve the Service. We will not materially reduce the core paid functionality during a current subscription term without reasonable notice, except where a change is required urgently for security, legal or regulatory reasons.

Features clearly identified as beta, preview, sandbox, test-only or experimental must not be relied upon for live tax submissions, statutory reporting or other production use unless we expressly state otherwise.

4. Customer data and records

As between you and Pipernus, you retain ownership of data, documents and records that you or your authorised users upload, import, create or submit through the Service (“Customer Data”).

You give us permission to host, copy, process, transmit and display Customer Data only as necessary to provide, secure, support and improve the Service, comply with your instructions and meet our legal obligations.

You are responsible for:

the legality, accuracy, completeness and quality of Customer Data;
checking imported, extracted, categorised, matched or calculated data before relying on it;
maintaining source documents and records for the periods required by law;
determining the correct accounting and tax treatment for your circumstances; and
keeping independent copies or exports where reasonably necessary for your business continuity and statutory record-keeping.

Automated extraction, matching, categorisation, artificial intelligence and suggested accounting treatments may contain errors. You must review and approve them before posting, filing or otherwise relying on them.

You must not upload data that you are not entitled to process, malicious code, unlawful content or information subject to restrictions that are incompatible with use of a cloud accounting service.

5. HMRC and Making Tax Digital

HMRC features are available only for supported taxes, tax years, business types, income sources, API versions and user roles shown in the Service.

Connecting an HMRC account authorises Pipernus to use only the OAuth scopes approved during the HMRC authorisation journey. You may revoke that authorisation through HMRC or the Service. Revocation or expiry may prevent retrieval or submission until you reconnect.

When you, or an authorised agent acting for you, confirm a submission, you instruct Pipernus to transmit the reviewed data to HMRC. Pipernus will not intentionally make a live HMRC submission without an authorised user’s submission instruction.

A transmission from Pipernus does not by itself mean that HMRC has accepted a return, update, declaration, claim or other filing. You must check the status and any receipt, correlation identifier, rejection or error shown by the Service or HMRC and take any required corrective action.

You remain responsible for:

registering for the relevant HMRC service;
providing correct taxpayer and business identifiers;
keeping digital records;
reviewing figures, adjustments and elections;
meeting filing, payment and record-retention deadlines;
ensuring that an agent has valid authority; and
paying tax, interest, penalties and other amounts due.

Pipernus is software, not HMRC, a government body, an accountancy practice or a legal or tax adviser. References to HMRC connectivity, compatibility or Making Tax Digital do not mean that HMRC endorses, approves, accredits or certifies Pipernus. We will use the expression “HMRC recognised” only if and while Pipernus has completed HMRC’s formal recognition process.

HMRC may change its APIs, rules, guidance, availability or authorisation requirements. We may change, suspend or withdraw affected functionality while we update the Service or where production access is unavailable.

To meet HMRC requirements, the Service may send fraud-prevention information with HMRC API requests, including relevant user, device, network, connection and software information. We process this information as explained in our Privacy Policy and do not knowingly submit fabricated or misleading header values.

If you act as a tax agent, you are responsible for maintaining any required Agent Services Account, client authorisation, professional registration and written authority.

6. Connected services

The Service may connect to banks, payment providers, app stores, HMRC and other third-party services at your request. Those services are governed by their own terms and privacy notices.

You authorise us to exchange the information required to provide each connection. You are responsible for maintaining any necessary third-party account and authority.

We are not responsible for the acts, omissions, availability, data quality or decisions of a third-party provider. We will, however, use reasonable care in operating our side of supported integrations.

Bank feeds and other imported information may be delayed, incomplete, duplicated or changed by the source. You must reconcile imported data against your source records.

7. Acceptable use

You must not, and must not permit anyone else to:

use the Service unlawfully, fraudulently or to facilitate tax evasion;
access another customer’s data without valid authority;
bypass security, tenant-isolation, rate-limit, billing or access controls;
probe, scan or test the Service for vulnerabilities without our prior written permission, except through a vulnerability disclosure process that we expressly provide;
introduce malware or interfere with the integrity or availability of the Service;
reverse engineer, decompile, scrape or copy the Service except to the limited extent that applicable law does not allow that restriction;
resell, sublicense or make the Service available to third parties except as expressly allowed for an accountancy firm managing authorised clients;
use the Service or its output to train a competing product without our written permission; or
use the Service in a way that could harm Pipernus, HMRC, a connected provider or another user.

8. Trials, subscriptions and payment

Unless the sign-up journey states otherwise, a new eligible workspace may receive a 30-day free trial. A trial gives access only to the features and limits shown in the Service. If you do not select a paid plan, some actions may be restricted when the trial ends.

A trial does not automatically become a paid subscription unless that is clearly disclosed before you provide a payment method. If you select a paid plan during a trial, charging begins as shown at checkout.

Current plans, features, prices, billing intervals and applicable taxes are shown in the Service or at checkout. Prices are normally displayed in pounds sterling and may be exclusive of VAT where stated.

Paid subscriptions renew for successive monthly or annual periods until cancelled. By subscribing, you authorise the relevant payment provider to collect recurring fees and applicable taxes.

Web subscriptions are normally processed by Stripe. Mobile subscriptions may be processed by Apple or another app-store provider. The payment provider’s terms also apply to payment processing, and app-store rules govern app-store billing, cancellation and refunds.

Plan changes may take effect immediately or at the next renewal, as shown before confirmation. A mid-term change may produce a pro-rated charge or credit.

We may change prices by giving reasonable advance notice. A price change will normally apply from your next renewal after the notice period.

You may cancel a web subscription through the billing portal and an app-store subscription through the relevant app store. Unless the cancellation screen states otherwise, cancellation takes effect at the end of the current paid period and access continues until then.

Fees already paid are not refundable for an unused part of a billing period, except where required by law or expressly stated at checkout. This does not affect any non-excludable statutory rights.

Deleting a Pipernus account does not necessarily cancel a subscription managed by an app store. You must cancel that subscription separately.

If an accountancy firm pays for a client workspace, the firm’s seat or subscription arrangement governs billing for that workspace. Ending that arrangement may require the client to select its own paid plan to retain paid access.

We may restrict paid features if payment is overdue, a payment is reversed or the subscription becomes inactive. You remain responsible for amounts properly due.

9. Availability, maintenance and support

We will provide the Service with reasonable skill and care and use commercially reasonable measures to maintain its availability and security.

The Service may occasionally be unavailable because of maintenance, incidents, internet failures, HMRC downtime or third-party services.

We may apply urgent changes without advance notice where necessary to protect users, data, the Service or a connected system.

Support is available through https://www.pipernus.com/support/ and hello@pipernus.com. Any response target that is not stated in a separate written service-level agreement is a target, not a guaranteed resolution time.

10. Privacy, data protection and security

Our Privacy Policy explains how we process personal data for our own purposes as a controller.

Where we process personal data contained in Customer Data on the Customer’s behalf, the data processing terms in Appendix 1 apply and form part of these Terms.

Each party must comply with applicable data-protection law, including the UK GDPR and Data Protection Act 2018, in relation to its own processing.

We use technical and organisational measures designed to protect Customer Data. No internet-based service can be guaranteed completely secure, and you must also maintain appropriate security for your devices, accounts and users.

You must tell us promptly if Customer Data is accidentally disclosed, accessed without authority or otherwise involved in a security incident.

11. Confidentiality

Each party must protect the other party’s confidential information using at least reasonable care and use it only to perform or receive the Service.

Confidential information does not include information that is public through no breach of these Terms, was lawfully known without restriction, is independently developed, or is lawfully received from a third party.

A party may disclose confidential information where required by law or a regulator, provided it gives advance notice where legally permitted.

12. Intellectual property

Pipernus and its licensors own all intellectual property rights in the Service, software, documentation, branding and improvements, excluding Customer Data.

These Terms do not transfer ownership of any Pipernus intellectual property.

If you give us feedback, you allow us to use it without restriction or payment, provided we do not publicly identify you without permission.

You may not use our name, logo or branding in a way that suggests endorsement or partnership without written permission.

13. Suspension and termination

You may stop using the Service and cancel your subscription in accordance with section 8.

We may suspend or restrict access where reasonably necessary because of:

a security risk or suspected unauthorised access;
unlawful, fraudulent or materially abusive use;
overdue payment;
a material breach of these Terms;
a request or requirement from HMRC, a court or regulator; or
a risk of harm to the Service, another customer or a connected provider.

Where reasonably possible, we will explain the reason and allow you to remedy the issue. We may act immediately where delay would increase risk or where we are legally prevented from giving notice.

Either party may terminate for a material breach that is not remedied within 30 days after written notice, or immediately if the other party becomes insolvent or ceases business.

On termination, your right to use the Service ends. You should export required records before termination. You may contact support for a reasonable assisted export where data remains available and we are legally permitted to provide it.

We will delete or retain Customer Data in accordance with the Privacy Policy, Appendix 1, applicable law and any valid written instruction. Termination does not affect accrued rights, payment obligations or provisions intended to survive.

14. Warranties and important limitations

We warrant that we will provide the Service with reasonable skill and care and substantially as described in the applicable product information.

You acknowledge that accounting, tax and regulatory outcomes depend on your facts, elections, records and professional judgement. The Service does not replace review by a suitably qualified accountant, tax adviser or lawyer where one is needed.

Except as expressly stated in these Terms and to the fullest extent permitted by law, we do not warrant that the Service will be uninterrupted or error-free, that every third-party service will remain available, or that use of the Service will prevent every penalty, loss or security incident.

Nothing in these Terms excludes terms that cannot lawfully be excluded.

15. Liability

15.1

Nothing in these Terms excludes or limits either party’s liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot lawfully be excluded or limited.

15.2

Subject to section 15.1, neither party is liable for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, goodwill or business opportunity.

15.3

Subject to section 15.1, Pipernus is not liable for loss caused by:

inaccurate, incomplete or late Customer Data or instructions;
a failure to review a suggested, imported or calculated value;
loss of an HMRC or third-party authorisation;
an outage, rejection, decision or change made by HMRC or another third-party provider;
use of a beta, preview, sandbox or test-only feature for production; or
your failure to maintain reasonable security or statutory records, except to the extent that the loss was caused by our breach of these Terms or negligence.

15.4

Subject to section 15.1, Pipernus’s total aggregate liability arising out of or in connection with the Service in any 12-month period is limited to the greater of GBP 100 and the fees paid or payable for the affected Service during the 12 months immediately before the event giving rise to the claim.

15.5

The limitations in this section apply only to the extent permitted by law and reflect that the Customer controls the data entered, the submissions authorised and whether to obtain professional advice.

16. Changes to these Terms

We may update these Terms to reflect changes to the Service, law, regulation, security, payment arrangements or third-party requirements.

We will give reasonable notice of a material change, normally by email or an in-app notice. A change required urgently by law, HMRC or security needs may take effect sooner.

If a material change has a substantial adverse effect on a current paid subscription, you may cancel before the change takes effect. Continued use after the effective date constitutes acceptance of the updated Terms.

17. General

These Terms, any applicable order, the Privacy Policy and Appendix 1 form the agreement between you and Pipernus for the Service. If there is a conflict, an expressly agreed order takes priority for commercial details and Appendix 1 takes priority for processing Customer Personal Data.

Neither party is responsible for delay or failure caused by events outside its reasonable control, although payment obligations already due are not excused.

You may not assign this agreement without our written consent. We may assign it as part of a merger, reorganisation or sale of the relevant business, provided the assignee continues to honour it.

If a provision is unenforceable, it will be adjusted only as much as necessary and the remaining provisions will continue.

A delay in enforcing a right is not a waiver of that right.

No person other than the parties has a right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.

These Terms and any non-contractual dispute are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction.

18. Contact

PIPERNUS GROUP LTD
Company number: 15880060
Registered office: 103 Lonsdale Avenue, Wembley, England, HA9 7EW

Email: hello@pipernus.com
Support: https://www.pipernus.com/support/

Appendix 1: Data Processing Terms

These Data Processing Terms apply where Pipernus processes personal data contained in Customer Data on behalf of the Customer (“Customer Personal Data”).

A1. Roles and instructions

The Customer is the controller and Pipernus is the processor of Customer Personal Data, except where the parties are each independent controllers under applicable law.

Pipernus will process Customer Personal Data only:

to provide, secure, maintain and support the Service;
on the Customer’s documented instructions, including use of the Service;
as described in these Terms and the Privacy Policy; or
where required by law, in which case we will inform the Customer before processing unless legally prohibited.

If we believe an instruction infringes data-protection law, we will notify the Customer and may pause the affected processing while the parties resolve the issue.

A2. Processing details

Subject matter and duration: provision of the Service for the subscription term and any limited period required for return, deletion, security, backup or legal retention.

Nature and purpose: hosting, organising, extracting, calculating, reconciling, transmitting, backing up, securing, supporting and deleting accounting, business and tax data as instructed by the Customer.

Types of personal data: identity and contact details; user and role information; taxpayer and business identifiers; transaction, bank, invoice, receipt, expense, payroll, property, income and tax information; supplier, customer and employee information; documents and communications; device, network, security and audit data; and HMRC OAuth tokens and submission metadata.

Categories of data subjects: Customer users, directors, partners, employees and contractors; the Customer’s clients and taxpayers; customers, suppliers, payees, employees, tenants, landlords and other persons appearing in Customer records.

A3. Pipernus obligations

Pipernus will:

ensure that personnel authorised to process Customer Personal Data are bound by confidentiality obligations;
maintain appropriate technical and organisational security measures, considering the nature of the data, risks, available technology and cost of implementation;
assist the Customer, taking account of the nature of processing, with reasonable requests relating to data-subject rights, security, breach notifications, data-protection impact assessments and regulator consultations;
notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Personal Data and provide available information reasonably required for the Customer’s response;
make information reasonably necessary to demonstrate compliance with these Data Processing Terms available to the Customer; and
allow a reasonable audit by the Customer or an independent auditor where documentary evidence is insufficient, subject to confidentiality, security, reasonable notice, minimal disruption and reimbursement of reasonable costs for an audit that is not required by a confirmed breach or material non-compliance.

A4. Sub-processors and international transfers

The Customer gives general authorisation for Pipernus to use sub-processors needed to provide the Service.

We will require each sub-processor to protect Customer Personal Data under written terms that provide materially equivalent data-protection obligations.

Our current categories of sub-processors and relevant locations or transfer safeguards are described in the Privacy Policy or are available on request.

We will give reasonable notice of a material new sub-processor where practicable. The Customer may object on reasonable data-protection grounds. The parties will work in good faith on a reasonable solution; if none is available, either party may terminate the affected Service.

Pipernus will use a lawful transfer mechanism where Customer Personal Data is transferred outside the United Kingdom, such as adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to approved Standard Contractual Clauses, as applicable.

A5. Return and deletion

During the subscription, the Customer may use available export functions or contact support to request a reasonable export of Customer Personal Data.

On termination and at the Customer’s choice, Pipernus will return or delete Customer Personal Data within a reasonable period, unless applicable law requires retention.

Data may remain temporarily in protected backups until overwritten under our backup schedule. During that period it will remain protected and will not be restored except for disaster recovery or legal necessity.

A6. Customer obligations

The Customer will:

have a lawful basis and provide all notices required for Customer Personal Data;
issue lawful, fair and documented processing instructions;
configure access appropriately and ensure its users process data securely;
respond to data-subject requests and regulator enquiries for which it is the controller; and
avoid providing special-category or criminal-offence data unless it is necessary, lawful and appropriately protected.

Bank account information (Open Banking)

When you connect a bank account to Pipernus, the account information service is provided by Salt Edge Limited, which is registered by the Financial Conduct Authority (FRN 822499) under the Payment Services Regulations 2017. Pipernus Group Ltd acts as an agent of Salt Edge Limited (FRN 1063163).

By connecting a bank account you agree to Salt Edge’s Terms of Delegated Account Information Services (https://www.saltedge.com/legal/delegated_ais_uk_terms) and acknowledge the Delegated Account Information Services: Privacy and Cookies Notice (https://www.saltedge.com/legal/delegated_ais_uk_privacy_policy).

You can withdraw your consent at any time by disconnecting the bank account in Pipernus or through your bank. Bank data is retrieved only after you give explicit consent to your bank and is used solely to display and reconcile your transactions in Pipernus.