Privacy policy
This policy explains what we collect, why, how long we keep it, and how to have it removed. Uploaded financial data is treated as confidential throughout.
What we collect
Your name and email from the account you sign in with; the questions you ask and the answers returned; files you upload and the text parsed from them; billing identifiers from Stripe; and, only if you consent, product analytics and session replay.
Why we collect it
To answer your questions, to keep your history where your plan includes it, to enforce the free cap, to bill you, and to understand which parts of the product need work.
Financial data
Uploaded statements are encrypted at rest and readable only by your account, enforced at the database and storage layer rather than in the interface. They are sent to the model provider that answers your question and are not used to train models. Your questions and uploaded figures are masked in our analytics and session-replay tools, so they are never captured there.
Retention and deletion
Attachments are kept for {retentionDays} days and then removed automatically. Conversations are kept until you delete them. You can delete an individual file, a conversation, or your whole account from settings, and deletion removes the stored file as well as the record of it.
Processors
Supabase for authentication, database and file storage; Vercel for hosting; Anthropic, OpenAI and Google as model providers; Stripe for payments; Resend for email; PostHog for product analytics and Microsoft Clarity for session replay, both loaded only after consent.
Cookies and measurement
Cookies needed to keep you signed in are always set. Analytics and session replay load only after you accept them, and you can withdraw that at any time in settings.
Your rights
You may request access to, correction of, or deletion of your personal data, and you may object to processing. Most of this is self-service in settings; for anything else write to {contactEmail} and we will respond within thirty days.
Contact
Questions about this policy, and any request to exercise the rights above, go to {contactEmail}. The data controller is the operator of IFRS 18 Navigator, Dubai, United Arab Emirates.