Privacy Policy

We use your information to provide and maintain the Service, send transactional emails (such as receipts and account notices), prevent fraud, and improve features. We do not sell your data, and we do not use your business records for advertising.

Data is stored on secure cloud infrastructure with encryption in transit and at rest. Access is restricted by Row-Level Security so that each organization can only reach its own data. We apply reasonable technical and organizational safeguards to protect your information.

We rely on trusted providers to run the Service: Supabase (hosting and authentication), Resend (email delivery), and optional OAuth providers (Google, Apple) if you choose to sign in with them. Each provider processes data under its own privacy terms.

We retain your data for as long as your account is active or as needed to provide the Service. You can request export or deletion of your data at any time; some records may be retained where required to meet legal or accounting obligations.

You may access, export, or request deletion of your data at any time by contacting us. You may also correct inaccurate information directly within the Service.

We use essential cookies only, for authentication and session management. We do not use third-party advertising or tracking cookies.

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from children.

We may update this policy from time to time. Where practical, material changes will be communicated via email or an in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.