Privacy

What you give us

Your account: name, email address, telephone if you give one, language, and a password we never store in the clear — only its argon2id hash, which cannot be turned back into the password.

Your companies and their data: locations, items, sales, purchases, stock, wallets, partners, staff, documents. These are your books; they are yours.

Files you upload — a logo, an item photo, an expense receipt — go through our API and are filed with Cloudinary in a folder belonging to your company.

What we record on our own

A request journal: the date, the action asked for, the response code, how long it took, and the IP address truncated to /24 — the first twenty-four bits, never the whole address. No request body is kept. It exists to spot somebody working through a password list and to understand an outage.

Inside each company, an activity journal: who created or changed what, and when. It is visible in your own settings, and it exists so you can answer “who changed this invoice”.

Messages sent from the public site or by the platform are kept with their delivery status, so we can reply and so a failed send can be retried.

Your data does not share a table with anybody else's

Every company has its own PostgreSQL schema. That is not a filter in a query: it is a separation at the database level, and a badly written query cannot reach another company's books.

The only shared data is the directory: your company's name, city and industry may appear when another member of the platform looks for a partner. Your personal address comes back only when it is what somebody typed in full.

Cookies

Two cookies, both technical and httpOnly — unreadable by any script on the page: a short-lived access token and a refresh token. They keep you signed in, nothing else.

Two preferences with no personal content: your language and whether the sidebar is collapsed.

No advertising cookie, no third-party tracker, nothing sold.

Who sees what

Inside your company the role decides: the cashier takes money without seeing the margin, the accountant reads without taking money.

Our operator can see accounts, companies, their volumes and the request journal — never the content of your sales, your invoices or your entries.

We sell nothing to anybody and share your data with no third party, beyond the technical providers the service needs: database hosting, application hosting, file storage and email delivery.

Keeping and leaving

Your data stays as long as your account does. You export sales, stock and entries as CSV whenever you want, without asking permission.

When an account is deleted, the schema of each company it owns goes with it. Technical logs, which carry neither your name nor the content of your documents, may survive until they rotate.

For a question, a correction or a deletion: write to us from the contact page.