Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email address, business name, and financial data (invoices, expenses, bank statements) you upload. We also collect usage data such as device type, browser, IP address, and interaction patterns to improve our service.

2. How We Use Your Information

We use your information to: (a) provide and maintain the ereQa service, (b) process your financial data using AI for categorisation and insights, (c) send you invoices, reminders, and service updates, (d) improve our AI models and product features, and (e) comply with legal obligations.

3. Data Storage & Security

Your data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. We store data on infrastructure providers that are independently SOC 2 Type II audited (Vercel, Railway, Supabase). Uploaded bank statement files are parsed and discarded; the extracted transactions are stored in your account. We never ask for or store bank login credentials.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymised, aggregate statistics for research purposes. We share data with service providers (email delivery, payment processing) only as necessary to operate the service, under strict data processing agreements.

5. Help Chat

If you use the chat on this site, we ask for your name and email so we can answer you and reply by email if you leave. Your messages are answered by an AI assistant (Anthropic's Claude, reached through OpenRouter; both process messages in the United States) and, if you ask for a person, by our team through Telegram. Chat records are stored with Supabase in the EU (Ireland) and kept for 12 months, then deleted. Please don't share passwords or card details in the chat. To see or delete your chat history, email support@ereqa.com.

6. Your Rights

You have the right to: access your personal data, correct inaccurate data, delete your account and all associated data, export your data in standard formats (CSV, PDF), restrict processing of your data, and withdraw consent at any time. To exercise these rights, contact privacy@ereqa.com.

7. Cookies & Tracking

We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand how you use ereQa and improve the product. You can disable non-essential cookies in your browser settings.

8. Data Retention

We retain your data for as long as your account is active. After account deletion, we permanently erase all personal and financial data within 30 days. Anonymised usage statistics may be retained indefinitely.

9. Children's Privacy

ereQa is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect.

11. Contact Us

For privacy-related questions or concerns, contact our Data Protection Officer at privacy@ereqa.com or write to: ereQa Inc., 14 Adeola Hopewell Street, Victoria Island, Lagos, Nigeria.