Privacy Notice
Last updated: 25 September 2026
Data we process
Account data, company identifiers, financial files you upload, charts of accounts, budgets, generated reports, and a minimal security audit log that excludes statement content and amounts.
Purpose and lawful basis
We process data to provide contracted financial analysis and reporting and to secure the service. We do not sell customer data or use it for advertising.
AI and international transfers
A fully classified trial balance uses the deterministic engine without sending its contents to an AI provider. When AI assistance is required, explicit consent is requested before necessary content is sent to a contracted processor. Processing may occur outside Saudi Arabia under applicable contractual and regulatory safeguards. You may decline and use the classified template for local processing.
Processors
- Hostinger for hosting, backups and delivery.
- Google or Anthropic only after explicit AI consent and only when an approved contractual processing mode is enabled.
Security and retention
Controls include HTTPS, AES-256-GCM encryption at rest, secure sessions, CSRF protection and minimal access auditing. Reports and source files are retained for seven years by default unless law or contract requires otherwise. Active copies are removed on deletion; backup copies expire under the hosting provider cycle.
Your rights
You may request access, a copy, correction, destruction, and withdrawal of consent where applicable. The authenticated Data Protection page supports export and company erasure.
Incidents and complaints
We follow the applicable breach response and notification process where an incident may cause harm. Contact the address above or the Saudi competent authority.