Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, role, and reporting/branch assignment within your Company, provided when your account is created.
• Customer Data — the invoice, customer, collections, and target data your Company uploads or enters into the Service, including customer names, contact details, invoice amounts and due dates, and notes logged about collections activity.
• Usage data — log-in activity, pages viewed, and actions taken within the Service, used to operate features like the activity feed and notifications.
• AI assistant content — messages you send to the in-app AI assistant, and, if you use voice input, a temporary audio recording that is sent for transcription and not retained after the transcript is produced.

We use the information above to:

• operate the Service, including displaying dashboards, follow-up activity, and notifications scoped to your role and branch;
• generate AI assistant responses, drafts, and the daily digest notification about accounts that need attention;
• maintain the security of the Service, including detecting and limiting abusive or automated use; and
• respond to support requests and communicate service-related updates.

We do not sell your information or your Company's Customer Data, and we do not use it for third-party advertising.

We use a small number of third-party providers to operate the Service, each of which processes data on our behalf under its own security and privacy commitments:

• Supabase — hosts our database and handles account authentication (login, password reset).
• Vercel — hosts the application and its scheduled background jobs (e.g. the daily digest).
• Groq— processes AI assistant messages and voice-transcription audio to generate responses. Only the content needed to answer your request (your message and the relevant data returned by the assistant's tools) is sent; Groq does not receive your login credentials.

These providers may process data on servers located outside your or your Company's country. We choose providers that maintain industry-standard security practices, but we do not control their infrastructure directly.

We retain account information and Customer Data for as long as your Company's account is active, plus a reasonable period afterward to allow for account recovery or as required by law. Some actions — such as resetting uploaded invoice, target, or collections data from the Uploads page — permanently delete that data immediately; the Service warns you before these actions complete. AI assistant chat history is kept only for the current session and is not persisted server-side beyond what is needed to generate a response and the usage-metrics log described below.

We log metadata about each AI assistant request (which model responded, token or audio volume, and which Company/user made the request) to monitor cost and reliability. This log does not store the message content itself.

We use reasonable technical and organizational measures to protect information against unauthorized access, alteration, or loss, including encryption in transit, role-based access control within the Service, and rate limiting on authentication and AI endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service uses a session cookie set by our authentication provider (Supabase) to keep you signed in. We do not use third-party advertising or analytics cookies today.

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. Because most Customer Data in the Service is entered and controlled by your Company, requests relating to that data should generally go through your Company's administrator first. You can otherwise reach us using the contact details below, and we will respond within a reasonable time.

The Service is intended for business use by adults and is not directed at individuals under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes, we will make reasonable efforts to notify affected Companies before the changes take effect. The “Last updated” date above reflects the most recent revision.

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to mudasar80@gmail.com.