Privacy Policy

What we collect

• Account data: your phone number and password (hashed), plus a contact email (required at signup; never used to sign in).
• Company data you add: name and entity civil number.
• Financial documents you upload for each fiscal year (trial balance, audited statements, and similar).
• An audit log of actions (upload, download, status changes) with timestamps — for security and accountability.
• Interface preferences (language and theme) stored in cookies on your device.

How we use your data

We use your data to prepare and verify your Qayd file, to communicate with you about your filings, to secure the platform and prevent abuse, and to improve the service in aggregated, anonymized form.

Who processes your data

We rely on trusted service providers to operate the platform:

• Supabase — database and file storage (AWS servers, ap-south-1 region).
• Vercel — website hosting.
• Twilio — delivers verification codes and status notifications to your number via WhatsApp.
• Resend — sends email notifications to your contact email.
• Sentry — technical error monitoring (personal data is scrubbed before sending).
• A third-party AI provider — filing documents are sent to generate the fill-model draft when you start preparation yourself from your filing page, or when our team starts it. The data sent is not used to train models.
• Google Analytics — measures visits to public pages. URLs from your filing pages and the admin panel are excluded and never sent, as are URL contents such as phone numbers and filing identifiers.

No data sharing

We do not sell your data or share it with any third party beyond the service providers listed above, unless required to do so by law.

Storage and security

Your documents are kept in a private, non-public bucket, with access governed by row-level security (RLS) policies restricting it to you and the processing team. All connections to the platform are encrypted (TLS).

Retention

We keep your documents while your account is active to make subsequent years' disclosures easier. You can request deletion of your account and data at any time.

Your rights

You have the right to access, correct, and request deletion of your data. Contact us via WhatsApp from within the platform and we will respond within a reasonable time.

Cookies

We use session cookies for sign-in and preference cookies (language and theme). Google Analytics measurement cookies are set only after your explicit consent, on public pages only — Google's script is not even loaded before that. You can withdraw consent at any time at the bottom of this page: measurement cookies are deleted, the page reloads clean without Google's script, and your other open tabs are notified to do the same. No advertising cookies, and we never sell your data. We also measure visits in aggregate without cookies (Vercel Analytics) and monitor technical errors (Sentry) with personal data scrubbed.

Changes and contact

Updates to this policy will be published on this page with the date above revised. For any privacy questions, contact us via WhatsApp from within the platform.