Privacy Policy

Draft for counsel review · AMNA Business Suite · operated by TRUVIS INTERNATIONAL SERVICES

1. What we collect

  • Account data: your name, email, password hash, and workspace membership.
  • Customer content: the financial records you or your team enter or upload — transactions, invoices, documents, notes. This is your data; we process it only to provide the Service.
  • Usage data: standard logs (IP, browser, pages) used for security and reliability.
  • Billing data: handled by Stripe; we never see full card numbers.

2. How AI processing works

When you request extraction or CFO commentary, the relevant document or financial summary is sent to our AI provider (Anthropic) to generate the result. We do not use your customer content to train models, and our provider agreements prohibit training on it. AI features are optional per action — nothing is sent until you invoke them.

3. Where data lives

Customer content is stored in a managed Postgres database and private object storage (Supabase). Tenant isolation is enforced with database row-level security. Uploaded documents are served through short-lived signed links, never public URLs.

4. Who we share with

  • Sub-processors needed to run the Service: hosting (Vercel), database/storage (Supabase), payments (Stripe), AI (Anthropic), email delivery.
  • Authorities, only when legally compelled.
  • Nobody else. We do not sell or rent personal data, ever.

5. Your rights

You can access, export, correct, or delete your data. Workspace owners can export the full books as CSV at any time and request account deletion, which removes customer content from production systems within 30 days subject to legal retention duties. For any request, write to hello@amna.app.

6. Retention and security

  • Data is retained while your account is active, and for a short backup window afterwards.
  • Access to production systems is restricted and logged; secrets are stored in a managed vault, not in code.
  • If a breach affects your data, we will notify account owners without undue delay.

7. Cookies

We use only functional cookies: your session, your selected workspace and company, and your theme. No advertising trackers.

8. Changes

Material changes to this policy will be announced on this page and by email to account owners before they take effect.

This document is a working draft and must be reviewed by legal counsel (including UAE PDPL applicability) before commercial launch.