Know what runs in your browser, what leaves it, and what SHVL keeps.
This page explains how SHVL handles data in its signed-in credit-control workspace, one-off chase packs, the ChatGPT plugin and free browser-side tools.
Free tools labelled browser-side read the file locally. A paid chase pack requires your aged-debtors CSV to be processed by SHVL services after checkout so the ZIP can be generated. SHVL creates files for your review and does not contact debtors. The recurring workspace is separate and only sends reminders after you connect a mailbox and activate a schedule.
Runs in your browser
The public site renders in the browser first. Free calculators and browser-side CSV tools do their work on the page where stated.
- Theme preference is stored locally so light or dark mode persists between visits.
- The aged-debtors health check reads the chosen CSV locally for the free report.
- Interface actions like opening pages and clicking CTAs start in the browser before any form or checkout data is sent elsewhere.
Leaves the browser
When SHVL has to generate a paid chase-pack ZIP, the browser sends the necessary checkout and CSV data to SHVL services.
- Stripe handles paid checkout. Card details stay with Stripe.
- Chase-pack generation uses SHVL backend services to create the Word letters, email drafts, Excel log, and README.
- Contact forms and interest forms send the details you choose to submit.
- The ChatGPT plugin sends the CSV text and sender name you choose to SHVL's MCP endpoint so it can return review-only drafts and calculations.
The paid pack is generated after checkout from the CSV you provide.
SHVL does one practical job: aged-debtors CSV in, reviewable chase-pack ZIP out. The ZIP contains editable Word letters, openable email drafts, an Excel statutory-interest log, and a README.
- You preview the CSV count and totals before paying.
- Paid chase-pack checkout is handled by Stripe before generation.
- SHVL uses the checkout session status to confirm payment before processing the uploaded CSV.
- Nothing is sent to debtors automatically. You download the files, review them, and decide what to send.
ChatGPT can use a supplied CSV or your signed-in SHVL workspace.
When you connect SHVL in ChatGPT and ask it to analyse an aged-debtors CSV, ChatGPT sends the CSV text, sender name and the Bank Rate you supply to SHVL's MCP endpoint. SHVL processes that request in memory to return draft wording and indicative UK B2B statutory-interest calculations.
In the original read-only ChatGPT plugin, SHVL sign-in lets you ask questions from the latest CSV import or completed accounting sync already stored in that SHVL workspace. Results can include customer names, invoice references, balances, aggregate invoice and receivables-payment totals, case and readiness state, and limited reminder evidence. The receivables view does not include bank balance, expenses, cash out, profit or runway. Results exclude email addresses, message content, provider IDs and individual payment records. Requests are scoped to the signed-in workspace. These tools do not call an accounting provider live, write to it, queue a reminder or send a message.
- SHVL does not store the submitted CSV in its database or use it to train a general model.
- The tool result repeats the debtor name, invoice number, due date and outstanding amount from the supplied CSV. It adds days overdue, statutory interest, fixed compensation, total claim, a subject line and a draft body. It does not return debtor email addresses.
- The endpoint does not send messages, create a workspace or start a payment.
- You must review every draft, check payment and dispute status, and confirm the applicable Bank Rate before sending anything.
Expanded agent tools
The npm CLI and the proposed expanded ChatGPT plugin use additional workspace tools. The published ChatGPT version remains read-only until an expanded version is approved and published. Expanded tools can return recorded customer message text, manually added evidence, Accounts Prep responses, and the mailbox and recipient addresses needed to review a blocker request. Those results are shared with the agent service you choose to connect. Do not request records you do not want that service to process.
With explicit approval, these tools can append activity, update payment-readiness checks, create draft checklists, save handover decisions and send the exact reviewed blocker request through your connected mailbox. Separate Xero access supports live financial reports and reviewed draft invoices, quotes, bills and purchase orders. Each action stays within an authorised workspace. Drafts are not authorised, sent or paid automatically. Provider acceptance is not proof of inbox delivery. Files and links supplied by clients remain evidence to review, not instructions for the agent.
Monthly packs keep your uploaded originals and editable review notes.
You choose the workspace that receives bank and Stripe reports, invoices, statements and original email files. SHVL keeps original files separately from classifications, currency conversions, payment explanations and review decisions. It does not connect to your bank, mailbox or Stripe account merely because you create a pack.
Retained monthly-pack originals, including earlier versions, have no automatic expiry. Files remain private to authorised workspace members. Clean originals and exports remain available to the owner if the paid entitlement ends; adding or editing records requires an active entitlement. Failed or unfinished uploads keep their shorter cleanup periods. Workspace deletion removes its records.
Supporting files are checked for malware before download. Original email files are downloaded without rendering their HTML or loading remote content. Downloads include checksums to verify original bytes. Storage limits apply; SHVL does not discard an earlier original to make room. A pack is a preparation workpaper, not statutory accounts, a tax return or confirmation that an accountant has approved it.
Your workspace keeps the records needed to track each chase.
A signed-in credit-control workspace stores customers, invoices, payments, chase status, notes, reminder schedules, connected-account identifiers and relevant communication history in SHVL's Cloudflare service. OAuth tokens are encrypted at rest. Your original accounting records and emails stay in Xero, QuickBooks or FreeAgent and your mailbox.
- Xero, QuickBooks or FreeAgent access is used to sync overdue invoices and payments. Microsoft 365, Outlook.com or Hotmail access is used to send reminders and approved invoice-blocker requests, and record matched replies or delivery failures. The Gmail sending connection uses send-only access and cannot read Inbox messages, replies or delivery failures.
- The separate selected-message Gmail add-on, currently in private testing, previews one message after your action. An explicit transfer sends its sender, subject, date and up to 4,000 characters of text to one SHVL customer case, without attachments or Gmail credentials. Temporary imports are encrypted and their codes expire after 15 minutes; scheduled cleanup removes expired records every five minutes. A reply explicitly saved after review remains in the case history until workspace deletion. See Google user data and deletion controls.
- An explicitly approved blocker request may send one selected clean, reviewed document through the connected mailbox. The member confirms that it belongs to the customer. SHVL retains the message, invoice links, document reference, approval and follow-up date. Provider acceptance is not confirmation of inbox delivery. Draft downloads do not send anything or establish delivery.
- Reply links let your customer say they have paid, give a payment date or raise a problem. The page shows their open invoices and your payment details to anyone holding the link, until the end of the third month after it was sent or until you reset it. SHVL stores what they submit, not their IP address. See reply pages.
- Disconnecting a provider removes SHVL's stored connection and token, pauses reminders, and keeps previously synced records and communication history for review.
- Workspace owners can download all workspace data as one JSON file, or permanently delete the workspace, from Data controls. SHVL cancels an active subscription before deleting the workspace and its local credit-control records.
- Stripe may retain payment records under its own legal obligations. You can also revoke SHVL from the connected provider's account settings.
Analytics do not include your file contents.
Public marketing pages load js/analytics.js for selected
SHVL usage events and Plausible. Public pages also use Google Analytics 4,
Ahrefs Web Analytics and Cloudflare Web Analytics. They measure page views and
events such as checkout clicks, sample downloads, demo views, and CSV
preview actions.
- Site analytics measure visits and tool use. SHVL does not use retargeting pixels.
- Analytics events describe funnel actions. They do not include the contents of your aged-debtors CSV.
- Signed-in product events may include the page path and account id, but not uploaded CSV or PDF contents. Free tools do not require an account.
- Theme preference is stored in local browser storage.
- Paid checkout status is used before chase-pack generation starts.
What happens when you use each service
Read the privacy notice and terms alongside this summary when reviewing SHVL for your business.
- Signed-in free tools marked browser-side keep the chosen file on the page.
- Paid chase-pack generation processes the uploaded CSV after checkout so the ZIP can be created.
- The one-off chase pack creates reviewable files and does not post letters, send emails or call debtors. The signed-in recurring workspace can connect to Xero, QuickBooks or FreeAgent and a mailbox when you choose.
Ready to review the connected workflow?
Start a no-card trial, connect Xero, QuickBooks or FreeAgent read-only or import a CSV, then review each reminder before connecting a mailbox or activating sending.
Related pages: Privacy, Cookies & storage, Terms, and Accessibility.