Introduction

Aqounta ("we", "our", "us") is an accounting tool for freelancers and small businesses, currently in beta and under active development. Features may change as we improve the service. We are committed to protecting your privacy and being transparent about how we handle your data.

Data We Collect

When you use Aqounta, we collect the following information:

• Your name and email address from your Google account, used to create and manage your Aqounta account.
• Company details you provide (name, address, and whatever tax or registration identifiers your jurisdiction issues) for invoicing purposes.
• Metadata about your documents (dates, amounts, descriptions) extracted via OCR. The documents themselves are stored in your Google Drive.

Document Storage & Ownership

Your documents remain yours at all times:

• All uploaded documents are stored directly in your personal Google Drive account.
• We use the drive.file scope, meaning Aqounta can only access files it has created — we cannot see or access any other files in your Drive.
• If you stop using Aqounta, your documents remain in your Google Drive. You retain full ownership and control.

Encryption & Data Protection

All sensitive data stored in our database is encrypted at rest using AES-256-GCM encryption. This includes:

• Your personal information (first name, last name)
• Company details (name, address, tax and registration identifiers)
• Payment account details (IBAN, BIC, RIB, account names)
• Invoice and expense descriptions

Document Processing (AI extraction)

By default, Aqounta automatically extracts details from the documents and voice memos you submit using its own AI provider (Mistral). You can connect your own provider at any time to route that processing through your own account and key instead.

• Unless you have connected and enabled your own provider, your document or memo is sent to Aqounta's AI provider (Mistral) for extraction, using an API key Aqounta holds. Only the extracted metadata (dates, amounts, descriptions) is saved in our encrypted database.
• If you connect your own provider — Mistral, OpenAI, or an endpoint you configure — your document or memo is sent to that provider instead, under its own terms, using the API key you supplied. We store that key encrypted and use it only to process what you submit.
• If no AI provider is available for your account, nothing is sent to any AI service — you enter the details yourself.

Third-Party Services

• Google (authentication, Google Drive for document storage) — subject to Google's Privacy Policy.
• Mistral — receives the documents and memos you submit for AI extraction, either via Aqounta's own account by default, or via your own account if you connect and enable a provider yourself (Mistral, OpenAI, or an endpoint you configure).
• Resend (email delivery for sending invoices) — only the recipient email and invoice content are shared.

Your Rights

You have full control over your data:

• Export all your data at any time in JSON format from Settings > Data & Privacy.
• Delete your account and all associated data permanently from Settings > Data & Privacy.
• Revoke Aqounta's access to your Google account at any time via your Google Account permissions page.

Cookies

We use a session cookie to keep you logged in (HTTP-only, secure in production, no tracking data). If you consent, we also use Google Analytics via Google Tag Manager to understand how the service is used. You can accept or decline analytics cookies at any time via the cookie banner.

Contact

For questions about this privacy policy, get in touch through the contact form.