How your data is handled

What is collected

• Your email address and password (the password is hashed by the authentication provider; we never see it).
• The company name and settings you type on the Account page.
• The files you upload - trial balances, budgets, operational data, FX rates, a chart of accounts, an answers file - and the documents the pipeline produces from them.
• Questions you ask about a run, and the answers given.
• An audit log: who did what, to which resource, when, from which network address and browser. You can read your own entries and cannot alter them; neither can we.

Where it is stored

Account records, run results and the audit log are held in a dedicated Supabase project (Postgres) for this product alone. Uploaded files are held in that project’s storage and, for the duration of a run, on the compute server that produces the documents. The web application runs on Vercel. All three are configured for this product and shared with no other.

Who can reach it

Only you. Every row and every stored file carries an owner, and the database itself refuses to return anything the requesting account does not own - the application is not the gate, it is a convenience on top of a gate enforced in the database.

A document you share by link can be read by anyone holding the link until it expires (seven days) or you revoke it. Every open is counted and shown to you.

Datarite Consulting staff do not open your files in the ordinary course of operating the service. If you ask us to look at a file to resolve a problem, we will say who looked and when.

What is never done with it

• Your files and figures are never sold, never shared with another customer, and never used to build industry benchmarks.
• They are never used to train a model. The question-answering feature sends one run’s computed summary - not your files - to the model provider for the answer only, under terms that exclude training.
• No advertising, no tracking pixels, no third-party analytics on any page.

How long it is kept

Uploaded files and generated documents are retained while your account is open, because a later run measures change against an earlier one and a decision is measured against what followed it. Uploads are grouped into dated folders and are never overwritten, which is what makes a figure traceable back to the exact file that produced it.

A run that did not release can be removed by you at any time. Close your account and all files, documents, questions, settings and log entries are removed.

Your rights

You can read everything held about you inside the app, correct your settings there, download every document, and ask for the account and its data to be deleted by writing to support@datariteconsulting.com. We answer within ten working days. The Nigeria Data Protection Act applies; where you are elsewhere, the rights your law gives you apply too.

Processors used

• Supabase - authentication, database and file storage.
• Vercel - the web application.
• Render - the compute server that runs the pipeline.
• Anthropic - answers to questions about a run, from the run’s summary only.
• Resend - transactional email (plan requests, feedback, password resets).

A payment provider will be added to this list when checkout opens, and will hold your card details; we never do.