Terms of Service

Version 2026-09-13. These are the terms shown in the portal when you accept a quote; the version and a fingerprint of the exact wording you accepted are recorded with your order.
In short: you give us read-only access to a Xero organisation; we size it, quote a one-off fee, and once you have paid we build a verified archive and hand it back encrypted with a password only you know. Links last 7 days and can be re-issued for 90 days; after that our copy is deleted. We do not promise any outcome with the ATO, an auditor or anyone else — we promise the process described here.

1. Who we are and what this covers

MirrorBeans is a product of EMJ Services Pty Ltd, ABN 16 626 783 551 ("we", "us"). These terms govern your use of the MirrorBeans portal at app.mirrorbeans.com and the archive service ("the Service"). By creating an account or accepting a quote you agree to them.

2. The Service

The Service produces a one-off, self-contained archive of a single Xero organisation that you nominate: its transactions, attachments, contacts, reports and — if the organisation runs payroll — its payroll records, together with financial statements and reports reconstructed from that data, a completeness certificate and a file manifest. Each Xero organisation is a separate order.

3. Xero access

You authorise us to connect to your Xero organisation through Xero's API with read-only permissions. We never write to, change or delete anything in Xero. You can revoke the connection at any time from Xero's Connected Apps page; if you do so before the archive is complete we may be unable to finish it. You warrant that you are entitled to grant this access for the organisation you connect.

4. Estimate, quote, payment

After you connect an organisation we take a small number of API calls to estimate its size. We then issue a fixed quote in the portal. Nothing is charged until you accept a quote, and the archive is not built until payment is received in full. A quote may be withdrawn or re-issued before acceptance; a re-issued quote requires a fresh acceptance. Prices are in Australian dollars and include GST unless the quote says otherwise. Fees are not refundable once the build has started, except as required by law.

5. The build

The archive is built overnight, within the request limits Xero imposes on its API. A large organisation may take several nights. We check every account balance against Xero's own trial balance and every transaction for balance, and we compare every attachment Xero lists with what was downloaded. The completeness certificate inside the archive states what was checked and any exception found. We do not conceal exceptions; where something could not be reconciled the certificate says so.

6. Your password

When the archive is ready you set the download password in the portal. It must be at least 12 characters. We never see it after that moment and we do not store it; the archive is encrypted with it and cannot be opened or recovered without it. If you lose it, you may set a new password from the portal within the 90-day period in clause 7 and we will package the archive again. After that period the archive is gone from our systems and cannot be re-issued.

7. Delivery, links and deletion

The encrypted archive is delivered as a download link. Each link is valid for 7 days. You may re-issue links from the portal for 90 days from delivery. On day 90 our copy of the packaged archive is deleted automatically and the order closes; we keep only a record of the order (dates, sizes, checksums) and no copy of your data. Download and check the archive within that period — after it, the only copy is yours.

8. Payroll and sensitive data

Where the organisation uses Xero Payroll, payroll records are included with tax file numbers, bank account details, dates of birth and home addresses redacted. There is no unredacted option. You remain responsible for handling the payroll data that is included in accordance with the Privacy Act 1988 (Cth).

9. Accounts and limits

You sign in with a Google or Microsoft account. An account may hold up to five Xero organisations, and up to three may be connected per day; we may decline new accounts or connections to protect the Service. You are responsible for activity under your account.

10. What we do not promise

The archive is a faithful copy of what is in Xero at the time it is built. We do not verify, correct or take responsibility for the accuracy of your Xero records, for documents that were changed or deleted in Xero before the build, or for figures on statements lodged from Xero that differ from what Xero holds today. We make no representation that the archive will satisfy the ATO, ASIC, an auditor, a financier or any other party — that depends on the records themselves and their requirements, which we cannot assess. Nothing in the Service is tax, accounting or legal advice.

11. Liability

To the extent permitted by law, our total liability to you in connection with an order is limited to the fee paid for that order, and we are not liable for indirect or consequential loss, loss of profit, or loss of data you have not kept your own copy of. Nothing in these terms excludes rights you have under the Australian Consumer Law that cannot be excluded; where a guarantee applies and can be limited, our liability is limited to supplying the Service again or refunding the fee.

12. Your obligations

You must keep your own copy of the archive once downloaded, keep your password safe, and not use the Service to obtain data you are not entitled to. You are responsible for your own record-keeping obligations; the Service is a tool to help you meet them.

13. Suspension and termination

We may suspend or close an account that breaches these terms or that we reasonably believe is being used abusively. You may close your account at any time; orders already delivered remain subject to clause 7.

14. Changes to these terms

We may update these terms. Each version is dated; the version you accepted, and a fingerprint of its wording, is recorded with your order and continues to apply to that order. Changes apply to quotes accepted after they are published.

15. Assignment

We may assign or transfer our rights and obligations under these terms to a related body corporate that carries on the MirrorBeans business, and will tell you if we do. Your obligations and our obligations to you are unchanged by such a transfer.

16. Governing law

These terms are governed by the laws of New South Wales, Australia, and you submit to the non-exclusive jurisdiction of its courts.

17. Contact

support@mirrorbeans.com

Version history