Privacy Policy
1. Information we collect
Account information — when you sign up we store the details you provide: your name, email address, username, company name, country and base currency. Passwords are stored only as one-way bcrypt hashes — we never store, and cannot read, your plain-text password.
Business data you enter — invoices, clients, expenses, transactions, budgets, documents and every other record you create inside the application. This is your data, entered by you.
Uploaded documents — files you attach to the Document Vault (PDF, PNG, JPG, WEBP) are stored on the server under random filenames and are only served after a signed-in ownership check.
Technical data — the standard technical details a web server sees during any visit (IP address, browser type, timestamps) and a security audit log of events in your workspace (sign-ins, failed attempts, admin actions).
2. How we use it
- To provide the service — your accounting workspace, dashboards and reports.
- To secure the service — session management, brute-force protection, audit trails and abuse prevention.
- To support you — answering questions and resolving problems.
- To improve the product — understanding which features are used.
We do not sell your data, rent it, or use it for advertising. We do not use your financial data to train third-party models.
4. Security
- Passwords hashed with bcrypt; never stored or transmitted in plain text.
- Sessions use HttpOnly + SameSite cookies, regenerated on sign-in, with a failed-login lockout shield.
- Every form and action is protected by CSRF tokens.
- Data files and configuration are blocked from direct web access; uploaded files require a signed-in, owner-checked download.
- HTTPS is forced for all traffic.
5. Cookies
We use exactly one cookie: a session cookie that keeps you signed in (optionally extended to 30 days when you tick "Keep me signed in"). It contains no personal data. We use no third-party tracking cookies. Details in our Cookie Policy.
6. Your rights
- Access — everything you enter is visible in the application itself.
- Correct — edit your profile (name, email, username, company, currency) any time; admins can edit user records.
- Export — admins can download a full data backup (JSON) and a users CSV from Admin → System.
- Delete — admins can delete any user and their entire workspace. To delete your own account, contact us below.
7. Retention
We keep your data for as long as your account exists. When an account is deleted, its workspace records (invoices, clients, documents and all) are removed with it. The security audit log keeps the last 500 events across the installation.
8. Changes to this policy
If this policy changes materially, we will update the date above and note the change in the application. Continued use after a change means you accept the updated policy.
© 2026 ACCOUNTITFAST (AIF) · Terms of Service · Cookie Policy · Home