Privacy Policy
AccountAI is developed and owned by SAADEH For Accounting and Auditing, a sole establishment licensed by the Government of Dubai — Department of Economy and Tourism (Professional License No. 1089358), Dubai, United Arab Emirates. This policy explains what we collect, why, and what you can ask us to do with it. Questions: support@accountai.ai.
What we collect
Account details: your name, email address, and the company information you enter (company name, address, tax registration number, users you invite).
Accounting data you enter or upload: invoices, receipts, bank statements, purchase documents, payroll records, customer and supplier records, and anything else you record in the product.
Usage and technical logs: sign-in events, activity logs of actions taken in your company, error diagnostics, IP address and browser/device type — used to run, secure and debug the service.
How we use it
To provide the service: storing your books, producing documents and reports, and keeping your company data available to the users you authorise.
To deliver AI features: document scanning (extracting figures from invoices, receipts and statements) and the in-app assistant.
To support you when you contact us, and to secure the service (authentication, permission enforcement, abuse and error detection).
We do not sell personal data. We do not use your data for third-party advertising, and we do not share it with advertisers.
Where your data lives
Your data is stored in a managed cloud database and file storage operated by our infrastructure providers. All traffic between your browser or app and our servers is encrypted in transit (HTTPS/TLS).
Each company's data is isolated at the database level, and access is enforced per user through the permission system.
AI processing
When you scan a document or use the assistant, the relevant content (the document image or text, and your query with the necessary context) is sent to AI model providers so the feature can return a result.
This processing exists only to deliver the feature you asked for. We do not use your accounting data to train public models.
Claude connector (MCP)
If you connect AccountAI to Claude (Settings → Connect to Claude), Claude can read and return to your own Claude session the accounting data you ask about: company profile, reports (trial balance, profit and loss, balance sheet, VAT summary, cash position), customers, suppliers, invoices, bills, payments, bank transactions, products and stock, fixed assets, loans, employees and payroll runs. With a read-and-write connection it can also create drafts and post records you ask for.
The connector acts only when you ask Claude to, as you, with your own role and permissions in each company. It cannot reach companies you are not a member of, and it never uses administrator access. Deleting companies, managing users and roles, billing, passwords and tax-evidence settings are never available through it.
Sign-in uses OAuth 2.0. Claude receives short-lived access tokens from our sign-in service; the connector does not store your password or tokens, and you can revoke access at any time, which ends it on the next call. We keep a connection record (app name, access level, created, last used, revoked) and log every call in your company's activity log.
Retention: connection records are kept while your account is active; retry (idempotency) records of write requests are deleted after 7 days; activity logs follow the Retention section above.
We do not sell this data, and we do not share it with third parties beyond the AI assistant you chose to connect. What Claude does with the data it receives is governed by your agreement with Anthropic.
To disconnect, open Settings → Connect to Claude and press Disconnect; company owners and admins can also revoke any connection in their company there. Questions: support@accountai.ai.
Data ownership, export and deletion
Your accounting data belongs to you. You can export your records from the product at any time.
You can delete a company and its data from the in-app Danger zone, or ask us to delete your account and data by writing to support@accountai.ai. Deletion is permanent.
Retention
We keep your data for as long as your account is active, because accounting records need to stay available to you. After account closure or a deletion request we remove your data from our live systems; residual copies in encrypted backups age out on the backup rotation.
Limited records (such as billing history) may be retained where law requires it.
Sharing
We share data only with the service providers needed to run AccountAI: cloud hosting and database, email delivery, payment processing, and AI model providers. Each receives only what is required for its function.
We may disclose data where we are legally required to do so.
Security
Encryption in transit, per-company data isolation, role- and permission-based access control, password complexity rules with reuse prevention and forced first-login change, and audit logging of sensitive actions.
No system is perfectly secure, but we treat access to your books as the core of the product.
Your rights
You can access, correct, export or delete your data. Most of this is available directly in the product; for anything else, email support@accountai.ai and we will respond within one business day.
Cookies
Inside the AccountAI application we use essential cookies and browser storage only: keeping you signed in, remembering your active company, language and interface preferences.
Our public marketing website uses the Google Ads tag to measure the performance of our advertising (for example, visits and sign-ups that come from our ads). It is not used inside the AccountAI application, and we never share your accounting data with advertisers. Where consent is required, the tag runs only after you accept, and you can change your choice at any time from the cookie settings link on the website.
Children
AccountAI is a business product. It is not directed at anyone under 18, and we do not knowingly collect data from children.
Changes to this policy
If we change this policy we will update the effective date above, and notify account owners by email when the change is material.
Governing law
This policy is governed by the laws of the United Arab Emirates, with the courts of Dubai having jurisdiction.