Privacy Policy

We collect information you provide directly, information collected automatically, and information from third parties you connect to the Service.

• Account data: name, email address, password (hashed), business name.
• Financial data: income, expenses, mileage, invoices, quotes, receipts, and bank connection metadata you enter or import.
• Payment data: processed by Paddle, our Merchant of Record. We never store full card details.
• Usage data: pages visited, actions taken, device and browser information, IP address.

• Provide, maintain, and improve the Service.
• Process subscriptions, trials, and renewals.
• Generate reports, tax estimates, and analytics for your business.
• Send transactional emails (receipts, security alerts, feedback confirmations).
• Detect fraud, abuse, and enforce our Terms.

Where applicable, we rely on: performance of a contract, legitimate interests (product improvement, security), consent (marketing, non-essential cookies), and legal obligation (tax, accounting).

We do not sell your personal data. We share limited information with:

• Infrastructure providers (hosting, database, email delivery) under strict confidentiality.
• Paddle, for payment processing.
• Analytics providers (Google Analytics 4, Microsoft Clarity) using pseudonymised identifiers.
• Authorities, when required by law.

We retain your data for as long as your account is active. You may request deletion at any time; we will erase or anonymise your data within 30 days, except where retention is required by law (typically 6 years for tax records).

We use encryption in transit (TLS 1.2+), encryption at rest, Row-Level Security, and role-based access control. No system is 100% secure — please protect your credentials.

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your data, and to object to processing. Contact us to exercise these rights.

Your data may be processed in the United States, United Kingdom, or European Union. We rely on Standard Contractual Clauses where required.

The Service is not directed at children under 16. We do not knowingly collect data from children.

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice. The "Last Updated" date reflects the latest revision.

Questions or requests: helzamsupport@gmail.com.