Vacei FS Review

Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains how A4 Services Limited ("A4 Services", "we", "us"), a company registered in Malta, collects and processes personal data when you use the Vacei FS Review application (the "Service"). We act as data controller for account data. We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data: your email address, an optional firm/name, and a securely hashed password (managed by our authentication provider, Supabase).
Billing data: a record of credit purchases (amount, date, item). Card details are handled entirely by Stripe; we never see or store your card number.
Usage data: basic operational logs (e.g. a review was run, timestamps) used to provide the Service and prevent abuse.
Uploaded documents: the financial statements you submit for review.

Uploaded documents are processed in memory. Your file is read to produce the diagnostic report and is not retained as a stored file after processing. We do not sell your data or use your documents to train third-party models. Where the optional AI review is used, document content is sent to our AI provider (Anthropic) solely to generate your report for that request.

2. How we use data

We process personal data to: create and secure your account; verify your email; provide the review Service and your reports; process payments; provide support; and comply with legal obligations. The legal bases are performance of a contract, our legitimate interests in operating and securing the Service, and consent where applicable.

3. Sub-processors

We rely on the following providers, who process data on our behalf under data-processing agreements: Supabase (authentication and database, hosted in the EU), Railway (application hosting), Stripe (payments), Anthropic (optional AI review), and Hostinger (email delivery).

4. Data retention

Account and billing records are kept for as long as your account is active and as required for legal and accounting purposes. Uploaded documents are not stored after processing. You may request deletion of your account at any time.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, contact us at info@vacei.com. You also have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC).

6. Security

We use encryption in transit (HTTPS), hashed passwords, access controls and reputable infrastructure providers. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Contact

Privacy questions: info@vacei.com.

← Back to sign in · Terms of Service