Legal
Privacy policy
This page explains what data is processed when you use Pusulafin and what happens to it. We have tried to keep it plain.
Effective date: 27 July 2026
In short
The financial data your company enters into Pusulafin belongs to you. We process it to provide the service. We do not sell it, do not use it for advertising, and do not combine it with other customers' data.
Our marketing site — this site — runs no tracking tools, advertising pixels or third-party analytics.
What we process
Account data: name, email address, language preference, role and session records.
Company data: company name, basic settings, subscription and billing details.
The business data you enter: customer and supplier records, sales, expenses, collections, payments, cheques and notes, loans, policies, and the documents you attach to them. You decide what that content is.
Technical records: error reports, security and access logs, and metrics used to monitor that the service is running.
Why we process it
To provide the service, manage your account and run your subscription.
To keep the service secure, detect abuse and fix faults.
To send you service messages: due-date reminders, security notices and subscription notifications.
Who can see your data
Your company's data is isolated at the company level. Users of another customer company cannot reach it; the isolation is enforced in the database.
Within your own team, only the users you authorise see the modules their role permits.
Our support team can access your account read-only, only when needed and only through a recorded support session. That access is logged and can be ended.
Our service providers
We use a small number of providers to run the service. Each one sees only the data its function requires.
- Server hosting: the application, database and file storage are hosted in a European data centre.
- Domain management: used only for DNS records; site traffic does not pass through this provider.
- Email delivery: verification, reminder and notification emails are sent through an email infrastructure provider.
- Payment provider: used for subscription payments. Your card details go directly to the provider and never reach us.
- AI provider: only for companies that switch AI commentary on, and only with derived summary data under pseudonyms.
AI commentary
AI commentary is off by default and is enabled per company. While it is off, no data is sent to an external AI service and the commentary is produced from localized templates.
When it is on, only computed summary data leaves. Personal and company names are replaced with pseudonymous codes; your raw records, documents and contact details are not sent.
Retention
We keep your business data for as long as your account is active. When you end your subscription you can ask us to delete it.
Technical records are kept for a limited period and deleted automatically.
Your rights
You have the right to access your personal data, ask for it to be corrected or deleted, and request a copy. Send your request to the address below.
If this policy changes
If we make a material change we will publish it on this page and, where appropriate, notify you separately. The effective date at the top always reflects the current version.
Contact us
For any privacy question or request, write to the address below.