Who is responsible
Aphelor is operated by Aphelor PTE. LTD., a Singapore company. UEN: 202546445C. Registered address: 68 Circular Road #02-01, Singapore 049422. For privacy requests, contact hello@aphelor.com.
For questions in the meantime, use the contact link below. Where you upload information about customers, employees or other people, ensure you have authority to provide it. The respective controller and processor roles will be specified in the applicable service agreement.
Information we handle
Depending on the features you use, this includes your account email and profile, company and customer information, invoices, mail and attachments, bank statements, extracted transactions, bookkeeping records, and messages you send to support.
The service also handles technical information needed for authentication, security and diagnostics, and limited usage measurements described below.
Why information is used
Information is used to provide the features you request: maintain your workspace, organize documents, prepare drafts, support collaboration, respond to enquiries and process export or deletion requests. Technical information helps operate and secure the service.
The final notice will identify the legal basis for each purpose, including any applicable contractual, legal-obligation, legitimate-interest or consent basis. This draft does not treat use of the service as blanket consent.
Service providers and AI
The application uses Supabase for authentication, database and file storage; Resend for configured email delivery; OpenAI for enabled AI drafting and extraction; and PostHog for usage measurement. Relevant information may be processed by these providers when the corresponding feature is used.
AI features may process the documents or text needed for your request. Review generated results before using or sharing them. Inviting an accountant or adviser can also give that person access to the information you choose to share.
The final provider list, processing locations, contractual safeguards and any international-transfer arrangements are still being confirmed. A Singapore company does not imply that all information is stored in Singapore.
Usage measurement and your choice
When configured, PostHog measures page paths and selected product events in cookieless mode by default. Session recording is disabled. Click autocapture is enabled only if you choose to allow it and remains excluded from invoice-generator surfaces. Financial content is excluded from the product-event payloads.
Your measurement preference is saved in this browser’s local storage. Declining measurement stops future product-analytics collection in this browser; it does not remove essential authentication or security processing. You can change the choice below. The legal assessment of the default measurement configuration remains to be finalized.
Product analytics preference: cookieless measurement only — no autocapture
Your rights and requests
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to certain processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Contact us with the account email and the nature of your request. We may need proportionate information to verify your identity. Do not email identity documents unless we arrange a suitable channel. You can also complain to the competent data-protection authority, including the CNIL in France or the PDPC in Singapore, as applicable.
Retention and changes
See Data Retention for the lifecycle of workspace records, deletion requests, logs and backups. Exact provider retention periods are not yet finalized. Material updates will be reflected in the date and content of this notice.