Privacy Policy

1. Who we are

This Privacy Policy describes how TECHTRIS PRIVATE LIMITED ("Techtris", "we") handles personal data when you use Assuary, our cloud accounting and invoicing service. Our registered office is at Ma. Heboodhooge, Nikagas Magu, Male City, Maldives.

2. Data we collect

We collect and process the following categories of data:

• Account data: name, email address, password hash, company name, and role.
• Business records you enter: client and supplier details, invoices, payments, bills, expenses, and bank statements you upload.
• Billing data: the plan you subscribe to, the identifier returned by our payment processor, and invoices we issue to you. Card details are handled by the payment processor and never stored by us.
• Usage and technical data: log records of requests to the Service, including IP address, browser, and timestamps, used for security, debugging, and abuse prevention.
• Connected Google account data: when a company administrator chooses to connect Google, we receive the Google account's verified email address, unique account identifier, granted OAuth scopes, OAuth credentials, and identifiers returned for messages sent through the integration.

3. How we use your data

• To provide the Service you subscribe to.
• To process payments and issue invoices.
• To send transactional emails (e.g. invoice deliveries to your clients, account notifications).
• To improve the Service and diagnose issues. Aggregated and anonymised analytics may be used for product decisions.
• To comply with our legal and tax obligations.

4. Sub-processors

We share data with the following service providers strictly to operate Assuary:

• Cloud hosting: our infrastructure provider hosts the application and database.
• Email delivery: platform and security emails are sent via Resend. When a company chooses the optional Google integration, its document emails are sent through the Gmail API.
• Payment processing: subscription payments are processed by Paddle.com Market Limited("Paddle"), which acts as the Merchant of Record and reseller for all our orders. Paddle collects your payment details and tax-residency information directly and never passes card data to us. Paddle also handles billing enquiries and returns. Its handling of your data is governed by Paddle's own privacy policy, under which it acts as an independent controller of the payment and tax data it collects, not merely as our processor.

Except where noted above, these providers process data on our behalf and are bound by their own data-protection commitments.

5. Optional Google account integration

A company Owner or Administrator may optionally connect one Gmail or Google Workspace account so authorised company users can send business documents from that address. A Google account is not required to use the rest of Assuary.

• Access and purpose: Assuary requests only basic Google account identity information and permission to send email. We use this access to identify and display the connected sender and to send invoices, payment receipts, quotes, purchase orders, and customer statements that an authorised user explicitly submits to recipients who consented to the email or reasonably expect that transactional accounting document.
• Transactional use only: the Google integration must not be used for marketing campaigns, prospecting, purchased or scraped address lists, spam, or any unsolicited commercial email. Assuary requires the sender to confirm the recipient relationship for every Google send and limits each send to a maximum of five saved recipients. Google sends can use only the client or supplier contacts selected to receive documents and the saved automatic CC addresses. Recipients cannot be added or changed inside the Google send window.
• What we do not access: Assuary does not request permission to read, search, modify, or delete Gmail messages or contacts, and does not browse or import the connected mailbox.
• Storage and protection: we store the connected email address, unique Google account identifier, granted scopes, an encrypted OAuth refresh token, connection status, and limited delivery logs. OAuth credentials are encrypted at rest and are never exposed to the browser. We never receive or store the Google account password.
• Sharing and transfers: Google processes the message and attachments that the authorised user asks Assuary to send. We do not sell Google user data or use or transfer it for advertising, data brokerage, credit assessment, lending, or the training of general-purpose artificial intelligence or machine learning models.
• Retention and control: the connection data is kept while the integration remains connected. A company Owner or Administrator can disconnect Google at any time; Assuary then deletes the stored connection and requests revocation of the Google token. Limited email delivery logs may be retained under the general retention rules below.

Assuary's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. International transfers

Some of our sub-processors may store or process data outside the Maldives. We rely on the contractual safeguards offered by those providers to protect your data in transit and at rest.

7. Retention

We keep your data for as long as your account is active. After cancellation, you have a reasonable period to export your records, after which we may delete them. We may retain limited records for longer where required by law (for example, tax records).

8. Security

We protect your data with industry-standard measures, including transport encryption (HTTPS), encrypted-at-rest storage, role-based access control, and routine backups. No system is ever fully secure; if you suspect a breach involving your account, email support@assuary.com immediately.

9. Your rights

You can access, correct, or export most of your data directly from within Assuary. You can also request deletion of your account and associated personal data by emailing support@assuary.com, subject to records we are required to retain by law.

10. Cookies

We use a small number of cookies and similar technologies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice.

12. Contact

Questions or requests about your data can be sent to support@assuary.com or by post to TECHTRIS PRIVATE LIMITED, Ma. Heboodhooge, Nikagas Magu, Male City, Maldives.