Privacy Policy

This policy explains what ALFASIHUN (“we”, “us”) collects, why, who else processes it, where it is held, and the choices and rights you have. It applies to the ALFASIHUN platform and its three applications — ALFASIHUN ERP, Professional Advisor, and Business Intelligence — across our website, web app and APIs.

We are the data controller for the workspace data you entrust to us. Where you invite users into your workspace, you are the controller for their data and we process it on your instructions; you should share this policy with them.

We collect only what the applications need to work, and use each category only for the purpose stated with it:

• Account identity — your name, email address, country, timezone, language and application preferences. Authentication is handled by a specialist identity provider (section 4); we store only an identifier linking your workspace to that account, never your password. Purpose: operating your account and workspace. Basis: contract.
• Workspace records — everything you enter into the applications: ledger journals, invoices, customers, suppliers, inventory, expenses, payroll, advisory case facts, client details, business models and scenarios. Purpose: delivering the applications you asked for. Basis: contract.
• Uploaded files — documents you upload, with filename, size and content type. Stored privately; released only through short-lived links scoped to your workspace. Purpose/Basis: document features you invoke / contract.
• Assistant memory — the self-learning layer: durable notes the assistant derives from how you use the platform (recurring transaction categories, the industries you model, the markets you follow, the topics you ask about), used to condition its future answers. It stays inside your workspace and is covered in section 6. Purpose: personalising the assistant. Basis: your instructions in the app and contract; you can ask us to delete or correct it at any time.
• Audit and security logs — authentication events, ledger and administrative actions, with timestamps. Purpose: security, integrity of financial records, and investigating abuse. Basis: legitimate interests and legal obligation.
• Technical data — IP address, browser type and request metadata, processed with the hosting provider to deliver and secure the service and to rate-limit abuse. Basis: legitimate interests.
• Support communications — messages you send us, kept with the issue they belong to. Basis: legitimate interests.

We do not ask for, and you should not enter, government identity numbers, payment card numbers or health information except where a field explicitly requests it (for example a tax registration number used to produce a compliant invoice, which is additionally encrypted at the field level).

We process your data to operate your workspace, and for nothing else:

• To authenticate you and keep your workspace separate from every other workspace.
• To store, retrieve and calculate the records and reports you ask for.
• To generate AI-assisted analysis when you invoke a feature that uses it (section 5).
• To personalise the assistant through the memory in section 6.
• To send service communications you have asked for, and security notices.
• To investigate abuse, and to meet legal obligations.

We do not sell, rent or trade your data. We do not share your financial or advisory records with advertisers. We do not use your workspace records to train our own models, and we do not run cross-site tracking or third-party analytics.

Running ALFASIHUN means specialist providers process data on our behalf, under contract, only on our instructions, and for no purpose of their own:

• Identity and authentication — verifying who you are at sign-in, including MFA and bot protection.
• Application hosting and edge delivery — serving the platform and keeping short-lived operational logs.
• Database and file storage — holding your workspace records and uploaded documents, encrypted at rest.
• Email delivery — transactional and security email you have asked for.
• AI inference — generating the analysis described in section 5.
• Market data — public price and reference feeds. No workspace data is sent to these.

We name our current providers to customers on request — write to alfasihun@gmail.com. We publish the categories rather than a live infrastructure inventory because a public map of the exact systems holding your records is useful mainly to people trying to attack them.

International transfers. These providers operate outside Pakistan, so using ALFASIHUN involves transferring your data internationally, including outside the EEA and the UK. Those transfers are covered by the providers' standard contractual clauses or an equivalent safeguard. By using the service you acknowledge this transfer.

Several features (advisory analysis, the accountant assistant, document understanding, semantic search, market analysis) work by sending the relevant text to our AI inference service and returning the result. When you invoke one of these features:

• The content you submit — which may include case facts, financial figures or document extracts — leaves our infrastructure and is processed by that provider. Secrets and card-shaped numbers are stripped before egress, but the substantive content is processed there.
• These providers operate under their own terms and privacy policies, which govern whether they retain or train on submitted content. We cannot make binding commitments on their behalf.
• AI features are optional. Data you enter and never submit to an AI feature is not sent to these providers.

If you handle client information under a professional duty of confidentiality, AI features are opt-in per request — you choose exactly what is submitted, and nothing is submitted without an action you take.

The assistant learns from how you work so it can stop asking things it should already know: which categories you record most, which industries you model, which markets you follow, which matters you handle. Learning is a side effect of working — recording transactions, opening cases, analysing charts — and of asking the assistant questions. The learned memory is stored as notes in your own workspace, and every AI answer is conditioned on it.

• Memory is scoped to your account and workspace; it is never shared across workspaces or with other users.
• Memory is not used for advertising or profiling outside the service.
• When you ask the assistant to remember or forget something, it does — and you can ask us to correct or erase the whole memory at any time (section 9).
• Closing your account deletes the memory with everything else, on the schedule in section 8.

• Your workspace is isolated from every other workspace, and that isolation is enforced independently at more than one layer — application-level tenant checks and database row-level security — so a fault in any single layer does not expose your records.
• Traffic is encrypted in transit, and data is encrypted at rest.
• Uploaded files are private: never publicly addressable, released only through short-lived links scoped to the workspace that owns them.
• Particularly sensitive identifiers (for example tax registration numbers) are additionally encrypted at the field level.
• Administrative access is restricted by role, and privileged actions are written to an append-only audit record.
• Rate limiting and bot protection run at sign-in and across the APIs to blunt credential attacks and scraping.

We describe these controls by what they guarantee rather than by the specific systems implementing them; detail of that kind mostly helps an attacker plan. Customers with a due-diligence requirement can request a fuller description under NDA.

No system is perfectly secure. If we become aware of a breach affecting your data we will notify you at your registered email without undue delay, and describe what happened, what data was involved and what we are doing about it — including where notification is required by law.

• Workspace records (including assistant memory) are kept for as long as your account is open.
• If you delete your account, we delete or irreversibly anonymise your workspace records within 30 days, except where we must retain something to meet a legal obligation (for example an invoicing record the tax authorities require).
• Deleting an individual record hides it from the applications immediately; it is removed from backups as they cycle.
• Audit and security logs are retained for up to 12 months, because their purpose is to reconstruct what happened after the fact.
• Backups are cycled out within 30 days.

You own what you put into ALFASIHUN. You may at any time ask us to:

• Give you a copy of your data in a portable format (and we provide export tools in the apps).
• Correct anything inaccurate — including any learned memory the assistant holds.
• Delete your account, individual records, or the assistant memory.
• Tell you exactly what we hold about you, and which categories of provider have processed it.
• Restrict or object to a particular kind of processing, including switching AI features off by simply not using them.

Write to alfasihun@gmail.com and we will respond within 30 days. We may ask you to verify the request through your account. Depending on where you live, you may also have the right to complain to your local data protection authority.

We use cookies that are necessary for the service to function: a session cookie that keeps you signed in, and a token our bot-protection layer uses to tell people from automated attacks. Your browser's local storage holds small interface preferences, such as your chosen theme and market watchlist, and the service worker cache serves the app shell offline. We do not use advertising or cross-site tracking cookies, and we run no third-party analytics.

ALFASIHUN is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

We will update the date at the top when this policy changes. If a change materially affects how we handle your data, we will tell you by email or an in-app notice before it takes effect.

Questions about this policy, or any request under section 9: alfasihun@gmail.com. We aim to answer substantively, not with a form letter — and if you are unhappy with our answer, tell us why and we will revisit it. See also our Terms of Service and Security Overview.