Privacy Policy
How account information, connected financial records, documents, and service-provider processing fit into your ARRSAL workspace.
Last updated: October 2, 2026
1. Scope of this policy
This Privacy Policy describes how ARRSAL handles personal information in connection with its website and financial workspace. “ARRSAL,” “we,” and “us” refer to the provider of the service.
When you use ARRSAL for a company, that company also determines who can access its workspace and how its business records are used. Questions about company-controlled records may need to be addressed to the company as well as to ARRSAL.
2. Information handled by the service
Account and company information can include your name, email address, login and account records, company details, invitations, and assigned permissions.
Connected financial information can include supported QuickBooks accounts, transactions, invoices, bills, balances, and reporting records. Information you provide in the workspace can include uploaded documents, review notes, checklist activity, and forecast inputs.
Billing records can include subscription status and payment-related references. Stripe processes payment-method information. Support information includes the details you choose to send through the Help form. Technical records can include request logs, browser or device information, and session information used to operate and troubleshoot the service.
3. How information is used
Information is used to create and manage accounts, apply company permissions, synchronize authorized QuickBooks data, provide requested reports and financial review workflows, manage subscriptions, respond to support requests, and maintain the service.
When you use AI-assisted features, relevant inputs may be processed to produce the requested analysis. Use of information for a workflow depends on the feature you choose and the records available to it. AI output should be reviewed before it is relied upon.
Information may also be used to investigate misuse, resolve billing or service issues, and meet applicable legal obligations. Any legally required permission or consent applies to the relevant processing.
6. Retention and deletion
Retention depends on the type of information, account and company requirements, the purposes for which it is processed, and applicable legal obligations. Account, billing, financial, and support records may have different retention needs.
Cancelling a subscription or disconnecting a provider is not the same as requesting deletion. Contact Help to discuss retained records, account closure, or a personal-information request. Requests are assessed against company authority, legal recordkeeping requirements, and available service processes; no automatic or fixed-time deletion guarantee is made here.
7. Account security and confidentiality
ARRSAL uses account access and company-role permissions to organize access to its workspace. Keep credentials private, review company access assignments, and report suspected unauthorized activity through Help.
No online service can guarantee absolute security. Do not send passwords, full payment details, or unnecessary sensitive records in support messages. The Security information page describes account access and connected-service responsibilities without claiming a certification.
8. Provider locations and international processing
Service providers may process information in countries other than the country in which you or your company are located. Processing locations and applicable protections depend on the service relationship and applicable law.
Contact Help if your company has specific requirements about provider processing or data location. This policy does not make a data-residency or regulatory-compliance guarantee.
9. Your choices and requests
Depending on applicable law, you may have rights to request access, correction, deletion, or a restriction on processing of certain personal information. You can also manage authorized connected-app access through the relevant provider.
Submit privacy requests through the Help form and identify the account or company concerned without sharing passwords. We may need to verify identity and company authority before acting. Legal obligations and company-controlled records may affect the scope of a request. Contact your company’s authorized administrator for matters controlled by that company.
10. Business use and public examples
ARRSAL is intended for business financial workflows, not for children’s use. Avoid submitting personal information that is unrelated to the accounting or service purpose.
The public demo and labelled marketing examples use fictional sample information. Those examples are not representations of real customer records or financial performance.
11. Policy updates and contact
Changes to this policy will be posted here with an updated date. Any applicable legal requirements for notice or consent continue to apply.
For a privacy question or request, contact ARRSAL through the Help form. Include enough information to identify the relevant account and issue, but do not send credentials or full payment details.
Adapted from Common Paper data-processing structure 1.1 under CC BY 4.0. Modified for ARRSAL; the source agreement is not incorporated by reference.