Privacy Policy

AFGTracker is a product of Arqam Financial Group. This page explains what we collect, why we collect it, who can process it, and how to request deletion.

What we collect

• Account info: name, email, and authentication identifiers from Clerk or Google sign-in.
• Business data you enter: business name, clients, invoices, receipts, expenses, mileage, accounts, and tax profile settings.
• Mileage locations: addresses you enter for routes may be sent to mapping providers for coordinates, driving distance, and map display. You can type miles manually instead.
• Payment info: paid plans are processed by Stripe. We do not store your full card number; we store plan tier and Stripe customer or subscription IDs.
• Usage: limited authenticated error diagnostics such as page path, browser, error message, stack trace, and account identifier. Query strings and obvious credentials are removed before storage.

Where it lives

• Local storage on your device: your books are stored in your browser on this device, and back up to the cloud when you sign in.
• Supabase cloud storage: when signed in, cloud sync sends data over encrypted connections and stores your books in Supabase with rows scoped to your Clerk user ID.
• Processors: Clerk handles auth, Supabase stores synced data and temporary private handoff workbooks, Stripe handles payments, a transactional email provider sends handoff emails containing expiring download links (never workbook attachments), Netlify hosts the app, and third-party AI providers process Tax AI requests. A current list of processors is available on request at info@arqamfg.com.

Mapping providers receive only the trip address data needed for route lookup; they do not receive your invoices, expenses, or financial reports. Handoff workbooks are deleted after 7 days and error diagnostics after 30 days.

What we don't do

• We do not sell, rent, or share your data with advertisers.
• We do not use your books to train AI models. Tax AI sends the current question, recent conversation context, tax profile, and annualized profit needed to answer to the configured AI provider.
• We do not install advertising trackers such as Facebook Pixel.

Your rights

• Export: Settings -> Export gives you CSV files and a JSON backup.
• Delete: email us and we will delete your synced account data within 30 days where legally allowed: info@arqamfg.com.
• California / EU residents: CCPA and GDPR rights apply. Use the same contact email for requests.

Cookies

We use essential cookies for authentication. Server-side rate limits use request metadata such as IP address; we do not use advertising cookies.

Changes

If this policy changes meaningfully, we will notify account holders before the change takes effect when practical.

Contact

Questions or requests: info@arqamfg.com