Privacy information

This document is awaiting verified operator and processing details and is not an approved privacy notice.

The local application stores account names and email addresses, office business records and audit history in PostgreSQL. Authentication uses Auth.js cookies for the session and associated authentication flows. Server-side session checks read current account status and permissions.

The code supports optional Stripe billing, Resend email, S3-compatible document storage and Sentry monitoring. Their presence in the source does not establish which services, accounts or hosting regions are used in production.

Before publication, the operator must confirm its legal identity and contact, controller/processor responsibilities, purposes and legal bases, actual providers and processing locations, international transfers where applicable, retention and deletion rules, data-subject request handling, and the applicable processing agreement.

Proposed retention periods are not implemented deletion promises. This review does not claim GDPR, GoBD or other certification.