Privacy Policy

AFGTracker is a product of Arqam Financial Group. This page explains what we collect, why we collect it, who can process it, and how to request deletion.

What we collect

• Account info: name, email, and authentication identifiers from Clerk or Google sign-in.
• Business data you enter: business name, clients, invoices, receipts, expenses, mileage, accounts, and tax profile settings.
• Mileage locations: addresses you enter for routes may be sent to mapping providers for coordinates, driving distance, and map display. You can type miles manually instead.
• Payment info: paid plans are processed by Stripe. We do not store your full card number; we store plan tier and Stripe customer or subscription IDs.
• Usage: limited authenticated error diagnostics such as page path, browser, error message, stack trace, and account identifier. Query strings and obvious credentials are removed before storage.

Where it lives

• Local storage on your device: your books are stored in your browser on this device, and back up to the cloud when you sign in.
• Supabase cloud storage: when signed in, cloud sync sends data over encrypted connections and stores your books in Supabase with rows scoped to your Clerk user ID.
• Processors: Clerk handles auth, Supabase stores synced data and temporary private handoff workbooks, Stripe handles payments, a transactional email provider sends handoff emails containing expiring download links (never workbook attachments), Netlify hosts the app, third-party AI providers process Tax AI requests, and Sentry receives crash diagnostics (stack traces and error messages only, with user identifiers and request bodies switched off). A current list of processors is available on request at info@arqamfg.com.

Mapping providers receive only the trip address data needed for route lookup; they do not receive your invoices, expenses, or financial reports. Handoff workbooks are deleted after 7 days and error diagnostics after 30 days.

What we don't do

• We do not sell, rent, or share your data with advertisers.
• We do not use your books to train AI models, and Tax AI only uses AI providers that do not train on what they receive. To answer, it sends the configured provider your question, recent conversation context, tax profile, annualized profit and summary totals from your books (income, expenses by category and by quarter, amounts owed, mileage and record counts). Client and vendor names from your records are not included.
• We do not install advertising trackers such as Facebook Pixel.

Your rights

• Export: Settings -> Export gives you CSV files and a JSON backup.
• Delete: email us and we will delete your synced account data within 30 days where legally allowed: info@arqamfg.com.
• California / EU residents: CCPA and GDPR rights apply. Use the same contact email for requests.

Cookies

We use essential cookies for authentication. Server-side rate limits use request metadata such as IP address; we do not use advertising cookies.

Changes

If this policy changes meaningfully, we will notify account holders before the change takes effect when practical.

Contact

Questions or requests: info@arqamfg.com