Your information. Clearly handled.

This Privacy Policy explains how Numera24 handles personal data when you visit our website, create or use a Numera24 account, contact us, or connect a third-party service. Numera24 provides invoicing, bookkeeping, document processing, and related business tools.

If your employer or another business gives you access to its Numera24 workspace, that business controls the records it asks you to use. Its administrator decides who may access the workspace and should answer questions about its internal use of your data.

Depending on how you use the service, we collect:

• Account and contact data, such as your name, email address, phone number, login details, support messages, and role.
• Company data, such as company name, addresses, tax and registration details, team members, permissions, and settings.
• Accounting data, including customers, suppliers, invoices, payments, expenses, accounts, currencies, reports, and audit history that you enter, upload, or import.
• Files and AI inputs, including receipts, invoices, statements, images, voice notes, prompts, and the outputs generated from them.
• Technical and usage data, such as IP address, browser or device information, app activity, diagnostics, security events, and website analytics.

If you choose to connect QuickBooks Online, Intuit gives Numera24 read access to the company and accounting information you authorize. This can include company settings, accounts, customers, suppliers, items, transactions, balances, and reports needed for the migration you request. We do not receive your QuickBooks password.

We store the Intuit company identifier and encrypted OAuth access and refresh tokens so the connection can work. When an administrator disconnects QuickBooks, Numera24 revokes the refresh token. Data already imported into Numera24 remains part of your company records unless it is deleted under the service's normal controls and legal retention duties.

We use information to:

• provide, secure, maintain, and improve Numera24;
• create invoices, records, reports, and user-requested migrations;
• process documents and produce AI-assisted drafts and answers;
• administer accounts, subscriptions, support, and communications;
• detect misuse, investigate errors, and protect users and the service;
• meet tax, accounting, legal, and regulatory obligations; and
• establish, exercise, or defend legal claims.

We rely on the grounds allowed by applicable law, including performing our contract with you, complying with legal duties, pursuing legitimate business interests, and consent where consent is required.

Numera24 processes the text, voice, images, and documents you submit to extract information, answer questions, and prepare drafts. Relevant content may be sent to our AI and infrastructure providers only as needed to deliver those features. Please upload only information you are authorized to use.

AI-created accounting entries remain drafts until a user reviews and approves them. You remain responsible for deciding whether an output is accurate and appropriate for your business.

We keep subscription, invoice, tax, payment-status, and transaction records needed to provide the service and meet financial obligations. Payment credentials are processed by our payment provider, Moyasar, under its own privacy terms. Where you choose to save a payment method, Numera24 stores a protected provider token rather than the card number for later authorized charges.

We share information only where needed with providers that help us run the service, such as hosting, security, analytics, communications, customer support, AI processing, accounting infrastructure, and payment processing. They may use the information only for the services they provide to us and under their contractual and legal duties.

We may also share information when you direct an integration, when required by law or a valid government request, to protect rights and safety, or as part of a merger, financing, acquisition, or transfer of the business. Third-party services such as Intuit and Moyasar apply their own terms and privacy policies to their services.

We use technical and organizational safeguards designed for the nature of the information we handle. These include tenant-based access controls, role permissions, audit records, and encryption for sensitive integration credentials. No internet service can guarantee absolute security, so please use a strong password, protect your device, and tell us promptly if you suspect unauthorized access.

We keep information for as long as needed to provide and secure the service, maintain business and accounting records, meet legal duties, resolve disputes, and enforce agreements. Retention depends on the type of record and why we hold it.

Raw QuickBooks objects staged for a migration are scheduled for removal 90 days after that migration is completed. Normalized summaries, migration history, and accounting records created from an approved migration may remain so your books and audit trail continue to work. Disconnecting an integration stops future access but does not itself delete records already imported.

To request account or personal-data deletion, contact us. We may retain information that applicable law requires us to keep, and we will explain any material limit that applies to your request.

Numera24 and its providers may process information in Saudi Arabia and other countries where they operate. When personal data is transferred across borders, we use safeguards required by applicable law and require providers to protect it consistently with this policy.

Depending on applicable law, you may ask to access, correct, obtain a copy of, or delete your personal data, and may object to or restrict certain processing or withdraw consent. Withdrawing consent does not affect processing already carried out lawfully.

Workspace administrators can manage many company users and records in the service. You can also contact us using the address below. We may need to verify your identity and authority before completing a request. You may also complain to the competent data-protection authority.

Numera24 is a business service and is not directed to children under 18. If you believe a child has provided personal data to us without proper authorization, please contact us so we can investigate and take appropriate action.

We may update this policy as the service or legal requirements change. We will post the updated policy here and change the effective date. If a change materially affects your rights, we will provide additional notice where required.

For privacy questions or requests, email info@numera24.com.