Filsa Business Privacy Policy

Filsa Business is operated by UXUI W.L.L in the Kingdom of Bahrain. This policy explains how we handle information when you use the Filsa Business mobile application and related services.

Information we handle

We handle information needed to provide the service, including your phone number, account and device/session identifiers, push-notification token, business profile and registration details, and financial records such as transactions, balances, invoices, clients, liabilities, VAT information, notes and reports.

We also handle documents, receipts and images you choose to upload. If you optionally connect Gmail, we handle the authorization and messages from bank senders you select for transaction analysis. The Google Play version does not request access to your SMS inbox.

How we use information

We use information to authenticate users; provide bookkeeping, invoicing, VAT, document, reporting, email-import and notification features; generate transaction suggestions; answer requests made through Ask Filsa; protect accounts; diagnose failures; and meet legal obligations.

Document extraction, selected bank-email analysis and Ask Filsa may send the content needed for the requested feature to Google Gemini. AI-generated results should be reviewed before they are saved or relied upon. We do not sell customer information or use customer financial information for advertising.

Service providers

We use service providers to operate Filsa Business, including cloud hosting and managed databases, private object storage and content delivery, Google OAuth/Gmail and Google Gemini, Firebase Cloud Messaging, Twilio for one-time-password delivery, and currency-rate services. Providers process information under their terms and our instructions as applicable. We may also disclose information where required by law or to protect rights and security.

Security

We use encrypted network connections, authenticated tenant access, encrypted storage for mailbox credentials, private media storage and expiring signed media links. No system can guarantee absolute security.

Retention and deletion

We retain information while needed to provide the service and for periods required by accounting, tax, fraud-prevention or other legal obligations. You can delete your account from Settings → Delete account. This removes your identity, businesses you own and their records, private media, mailbox connections and associated credentials. For a business owned by someone else, its accounting records are preserved while your membership and personal attribution are removed. Legally required information and secured backups may remain until their applicable retention or normal expiry period ends.

You may disconnect Gmail at any time. This stops future mailbox access; records already created from messages remain until you delete them or your account, subject to legal retention.

Your choices and rights

You may request access, correction, deletion, restriction, objection or a copy of your information as applicable. Optional Gmail access and document uploads can be declined, notifications can be managed in device settings, and the account can be deleted in the app.

For privacy questions or requests, email info@weuxui.com.

Children and international processing

Filsa Business is intended for adult business users and is not directed to children. Service providers may process information outside Bahrain, subject to applicable safeguards.

Changes

We may update this policy when the service or law changes. Material changes will be communicated as required.