Privacy Policy

What we collect

• Account data: your phone number and password (hashed), plus a contact email (required at signup; never used to sign in).
• Company data you add: name and entity civil number.
• Financial documents you upload for each fiscal year (trial balance, audited statements, and similar).
• An audit log of actions (upload, download, status changes) with timestamps — for security and accountability.
• Interface preferences (language and theme) stored in cookies on your device.

How we use your data

We use your data to prepare and verify your Qayd file, to communicate with you about your filings, to secure the platform and prevent abuse, and to improve the service in aggregated, anonymized form.

Who processes your data

We rely on trusted service providers to operate the platform:

• Supabase — database and file storage (AWS servers, ap-south-1 region).
• Vercel — website hosting.
• Twilio — delivers verification codes and status notifications to your number via WhatsApp.
• Resend — sends email notifications to your contact email.
• Sentry — technical error monitoring (personal data is scrubbed before sending).
• A third-party AI provider — filing documents are sent to generate the fill-model draft only when our team requests it, and the data sent is not used to train models.

No data sharing

We do not sell your data or share it with any third party beyond the service providers listed above, unless required to do so by law.

Storage and security

Your documents are kept in a private, non-public bucket, with access governed by row-level security (RLS) policies restricting it to you and the processing team. All connections to the platform are encrypted (TLS).

Retention

We keep your documents while your account is active to make subsequent years' disclosures easier. You can request deletion of your account and data at any time.

Your rights

You have the right to access, correct, and request deletion of your data. Contact us via WhatsApp from within the platform and we will respond within a reasonable time.

Cookies

We use session cookies for sign-in and preference cookies (language and theme) only. No advertising cookies, and we never sell your data. We measure page visits in aggregate without cookies (Vercel Analytics) and monitor technical errors (Sentry) with personal data scrubbed.

Changes and contact

Updates to this policy will be published on this page with the date above revised. For any privacy questions, contact us via WhatsApp from within the platform.