Privacy Policy

Last updated: November 1, 2026

This Privacy Policy explains how SIA Anyon3e ("we", "us", "our") collects and processes personal data when you use EzyFin.

1. Data Controller

Data controller:

SIA Anyon3e

Email: info@anyon3e.com

2. Data We Process

Depending on your usage, we may process:

  • Account data (name, email, authentication identifiers)
  • Company profile data (company name, registration and VAT details, addresses)
  • Document data you upload (images, PDFs, extracted accounting fields)
  • Technical and security data (logs, IP, device/browser metadata, usage events)
  • Billing data required for subscriptions, document-credit purchases and invoicing
  • Device notification tokens and notification preferences when you enable document notifications

3. How We Use Data

We use personal data to:

  • Provide account access and core application features
  • Process and store accounting documents
  • Sync company data and user permissions
  • Operate billing, invoicing, and subscription lifecycle
  • Provide support, detect abuse, and improve security
  • Comply with legal and regulatory obligations

4. Legal Bases (GDPR)

We process data under one or more of the following legal bases:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests (security, fraud prevention, service reliability)
  • Consent, where legally required

5. Processors And Third Parties

We use trusted providers, including:

  • Supabase for database, storage, authentication, and server-side processing
  • Vercel for web hosting and infrastructure services
  • Stripe for web subscription billing and invoicing; Apple and Google Play for mobile in-app purchases
  • Google Vision for document OCR and OpenAI for document extraction, visual interpretation, coding and supplier research
  • Firebase Cloud Messaging for document notifications when enabled
  • Postmark for incoming email attachments
  • PayTraq when you connect a company and authorize document exports or enable synchronization

We use these providers to deliver the features you use, subject to applicable service and data-processing terms. Documents and extracted information are also available to authorized members of the selected company. Supplier web research uses supplier-identifying details rather than complete invoices.

6. International Transfers

Your data may be processed in jurisdictions outside your country. We use appropriate safeguards required by applicable law for international transfers.

7. Retention

We retain data as long as needed for service delivery, legal obligations, dispute resolution, and security. Retention periods may vary by data category and legal requirements.

8. Your Rights

Subject to applicable law (including GDPR), you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where processing is consent-based)
  • Lodge a complaint with a supervisory authority

9. Security

We apply technical and organizational measures to protect data, including access controls, logging, and secure infrastructure practices. No system is completely risk-free.

10. Cookies

For cookie-related details, see our Cookies Policy.

11. Policy Updates

We may update this Privacy Policy periodically. Updated versions are published in the app and become effective from the published date.