Odeh Books Privacy Policy

Odeh Technologies FZ-LLC, Compass Building, Al Hamra Industrial Zone - FZ, Ras Al Khaimah, United Arab Emirates, is responsible for personal information processed through the Service. For privacy questions or requests, contact bacil@odehtechnologies.com. If you use a team workspace, the workspace owner may also determine why and how business and personnel information is processed.

Depending on the features you use, we process:

• Account information. Your email address; your name (and, with Google, your profile picture) if Sign in with Apple or Google shares it; and the account identifier that links your records to you.
• Business profile. Business name, phone number, address, and tax registration numbers.
• Financial records and documents. Photos and files of receipts, invoices, bills, leases, and other documents; spreadsheet and CSV imports; expenses, revenue, inventory, employee and payroll-related information, bank-account details you record, journal entries, and reports, and the information contained in them.
• Customer and supplier details you enter, such as names, phone numbers, email addresses, addresses, and tax numbers. This includes personal information about people other than you.
• AI assistant content. The messages you send the assistant, your voice notes, and the conversation history.
• Device information used to enforce the device-session limit: the device name (usually the model), operating-system version, app version, time of last activity, and a Device ID — a random identifier created when the app is installed and kept in the device Keychain. It is not an advertising identifier and is used only for this limit. A browser connected to the Web ERP is recorded in the same way.
• Purchase history. Your subscription status and trial eligibility, verified with Apple. We do not receive your payment card details.
• Usage counts needed for plan allowances (for example, the number of scans), audit and security records, and support messages you send us.

We do not collect your precise location or your contacts, and we do not track you across apps or websites owned by other companies.

We use information to create and secure accounts; provide scanning, OCR, AI, automation, accounting, reporting, workspace, import, export, and support features; enforce device-session limits; administer subscriptions and trials; communicate about the Service; detect, prevent, and investigate abuse or security incidents; comply with legal obligations; and maintain, troubleshoot, and improve the Service. We do not use Your Content for a purpose incompatible with the purpose for which it was collected without an appropriate lawful basis or notice.

Where applicable law requires a legal basis, processing may be necessary to provide the Service you request, meet legal obligations, protect legitimate interests such as security and fraud prevention, or be based on your consent. Sending your information to AI providers (section 6) is based on the permission you give in the app. You may withdraw consent where consent is the basis, although this will not affect earlier processing and may limit features that need that information.

We receive information directly from you and your authorised team members; from documents, files, and data you upload or enter; from an identity provider (Apple or Google) when you sign in; from Apple for App Store purchases and subscription status; and from an accounting platform when you choose to import from or connect one.

Some features send information to third-party AI providers. The iOS app asks for your permission before any of it is sent from your phone. Without permission, document scanning and the assistant stay off in the app; the rest of the app keeps working. Documents you upload through the Web ERP in a browser are read by the same document-reading service described below.

• AI assistant. Your messages, plus the business records the assistant reads to answer you (balances, transactions, customers and suppliers, payroll figures, audit history, and your business profile), are sent by our server to OpenAI (model GPT-4o).
• Voice notes. Your recording is uploaded to our storage and sent to OpenAI (Whisper) to be transcribed.
• Live voice calls. Microphone audio streams directly from your phone to OpenAI’s Realtime API (api.openai.com) over WebRTC. During a call, the assistant can read the same business records to answer you.
• Document scanning and imports. Images and files of receipts, invoices, bulk scans, leases, advance and prepayment documents, and spreadsheet or CSV imports, and the questions you ask the setup assistant, are sent to our workflow-automation service (n8n Cloud), which uses the AI providers OpenAI and Anthropic to read them.

This information is used only to provide the feature you asked for. It is not used for advertising or tracking. Under their API terms, OpenAI and Anthropic do not use API data to train their models by default.

You can give or withdraw permission at any time in the app under Settings › AI Data Sharing. Withdrawing stops future sharing; it does not recall information already processed.

Two network services see only your device’s IP address, never your records: Google’s STUN server (stun.l.google.com), which helps a live voice call connect, and open.er-api.com, from which the app downloads currency exchange rates.

We share information only as needed to operate the Service, with these providers:

• Supabase. Hosting, database, file storage, sign-in, and server functions.
• n8n Cloud. Workflow automation that runs document reading, imports, accounting-platform integrations, and the setup assistant.
• OpenAI and Anthropic. AI processing, as described in section 6.
• Apple. Sign in with Apple, App Store purchases, and subscription verification.
• Google. Google Sign-In, if you choose it.
• Resend. Delivery of team invitation emails (the invitee’s email address, the team name, and the inviter’s name).
• Vercel. Hosting of the Odeh Books Web ERP, the browser companion you connect from the app.

If you choose to connect them, information is also exchanged with accounting platforms (QuickBooks Online, Xero, FreshBooks, or Odoo) and, for Saudi e-invoicing, with the FATOORA platform of the Zakat, Tax and Customs Authority (ZATCA), which receives the invoices you submit.

We may also disclose information to professional advisers, corporate transaction participants, authorities, or other parties when required or permitted by law or necessary to protect rights, safety, or security.

We do not sell Your Content or personal information, and we do not use it for advertising or tracking.

Information may be processed in the United Arab Emirates and in other countries where we or our service providers operate. Data-protection laws in those countries may differ from those where you live. Where required, we will use appropriate safeguards for international transfers.

We retain information for as long as needed to provide the Service, maintain security, resolve disputes, meet legal or accounting obligations, and enforce agreements. Voice notes are kept with your account’s assistant history and are deleted when your account is deleted.

You can delete your account in the app at any time in Settings › Account › Delete Account. Team members can delete their own account from their settings or from the screen shown when their team access has been removed. Deleting an owner account permanently deletes the account, its business records, uploaded documents, and voice notes; a team member’s deletion removes that member’s account, while the workspace’s records stay with the workspace owner. If you signed in with Apple, the app’s Sign in with Apple authorization is revoked. Deleting your account does not cancel an App Store subscription; manage that in your Apple account settings.

When an account is deleted, we delete or de-identify information that we no longer need, subject to legitimate backup, security, dispute-resolution, and legal-retention needs.

We use organisational and technical measures intended to protect information. However, no system, transmission, or storage method is completely secure. You are responsible for protecting your credentials and devices, using appropriate workspace access controls, and notifying us promptly of suspected unauthorised access.

Subject to applicable law, you may have rights to request access to, correction of, deletion of, restriction of, or objection to certain processing of your personal information; to withdraw consent; and to receive information about processing and transfers. You can withdraw AI permission in Settings › AI Data Sharing and delete your account in the app, as described in section 9. For other requests, contact bacil@odehtechnologies.com. We may need to verify your identity and authority before acting. You may also have the right to complain to the relevant data-protection authority.

If you submit information about employees, customers, suppliers, or other people, you are responsible for giving any required notices and obtaining any required permissions. You must not use the Service to process information unlawfully. Workspace owners are responsible for configuring access so team members only see information they are authorised to access.

The Service is intended for business use and is not directed to children. Do not use the Service to submit children’s personal information unless you have a lawful basis and all required permissions.

We may update this Policy to reflect changes to the Service, law, or our practices. The current version is available in the app and on this page. If a change is material, we will provide notice through the Service or by another reasonable method.

For privacy questions or requests, contact bacil@odehtechnologies.com or write to Odeh Technologies FZ-LLC, Compass Building, Al Hamra Industrial Zone - FZ, Ras Al Khaimah, United Arab Emirates.