Privacy Policy

This policy explains what information we handle when you visit this website (www.pocketledger.ae) and, at a high level, how data is treated while providing the PocketLedger service. We keep the website section short because the marketing site collects very little directly.

What this website collects

The production marketing site uses Vercel Web Analytics for aggregate page-view reporting and Vercel Speed Insights for Core Web Vitals. Web Analytics may process the page path, referring site, general location, browser, operating system, and device type. Speed Insights may process the route, browser and device context, network speed, country, and performance measurements such as loading, responsiveness, and layout stability.

We remove query strings and page fragments before those analytics or performance events are sent. We do not use cookies for analytics or performance measurement, and the reporting is not intended to identify an individual. Unknown page paths are grouped under one generic path rather than recorded verbatim. If custom conversion events are enabled, they contain only categorical interaction data: a CTA channel and placement/intent, a pricing band and interaction method, or an animation outcome and viewport class. They never contain message text, names, contact details, document content, or accounting data.

Vercel also generates standard hosting and server logs, such as IP address, browser type, and requested pages, for security and operational purposes. We do not run advertising pixels or cross-site behavioural tracking.

We use Sentry for application error monitoring. When an unexpected error occurs, an error report may include the error and stack trace, a sanitised page path, browser, device and runtime context, and the deployed release and environment. Our configuration removes query strings and fragments, request and response bodies, headers, cookies, user identity, and local variables from stack frames. We do not enable Sentry Logs, performance tracing, profiling, or session replay. The Sentry project uses Sentry's Germany data region. Before browser error reporting is enabled in production, we require the service to enforce a maximum 30-day error-event retention.

When you contact us by WhatsApp or email, we receive whatever you choose to include — typically your name, business name, and contact details — and we use it only to respond to you. WhatsApp is a third-party messaging service, so please do not send passwords or sensitive identity documents in an initial enquiry. How we handle WhatsApp as a working channel for the service is described under WhatsApp below.

Cookies

We do not use cookies for analytics or performance measurement. The homepage and mobile contact prompt use session storage only to remember, for the current browser session, whether the introductory animation has played and whether you dismissed the prompt. The PocketLedger application (a separate, signed-in service area) uses essential authentication cookies to keep authorised users signed in. Neither site uses cookies for advertising.

Accounting-service data, at a high level

Business records, documents, contact details, and accounting entries are processed to provide the agreed accounting service. Access is limited according to operational roles and the business relationships recorded in the system. We do not sell those records or share them with third parties for their marketing.

WhatsApp

WhatsApp is a working channel for the service, not only a way to say hello. Our business number runs on the WhatsApp Business Platform provided by Meta. Customers can send receipts, invoices, and other records to it, and those go into their books.

When you message that number we receive the phone number you send from, WhatsApp's identifier and timestamp for the message, the message type, and the content itself — text, photos, documents, or voice notes. Where the number belongs to a customer we have verified, we store that conversation so the work is auditable: the inbound and outbound messages, the files you sent, the stage the conversation has reached, and a record linking the number in international format to a person and a business, with the times it was verified, last used, and unlinked. Files you send are kept in our document storage and become documents, expenses, or invoices in the service. Messages from a number we do not recognise are handled as an enquiry and are not filed against any business.

Where automatic extraction is enabled, the content of an image or voice note may be sent to our AI processing provider to read the document or transcribe the note into a draft entry. A person can review those drafts, and no draft is posted to the books by extraction alone.

We may also send messages to you on that number — confirmations of what we recorded, questions about a document, and reminders you have asked for or that the service needs to send.

Meta handles the delivery of WhatsApp messages under its own terms and privacy policy, which govern the parts of the exchange that happen on WhatsApp itself. Because a message passes through a third-party service, please do not send passwords, and send identity documents only when we have asked for them.

You can ask us to unlink your number, which stops both ingestion and reminders, or to delete the conversation entirely — see Data Deletion Request.

Who is responsible and why we process data

POCKET LEDGER ACCOUNTING AND TAX SERVICES - L.L.C - S.P.C is responsible for the processing described here. We process information to respond to enquiries, take steps toward and perform an agreed service, protect the service and its users, meet legal and regulatory duties, and pursue legitimate operational interests that do not override your rights. Where consent is the appropriate basis, you may withdraw it for future processing.

Service providers and international processing

We use service providers for hosting, aggregate site measurement, and error monitoring (including Vercel and Sentry), messaging (Meta, for the WhatsApp Business Platform), automatic document and voice extraction, communications, email, and security operations. Meta, Vercel, Sentry, our AI processing provider, and some other infrastructure providers may process information outside the UAE. We limit providers to the service they perform and apply contractual or other safeguards appropriate to the transfer and the information involved.

How long we keep information

We keep information only for as long as needed for the purpose it was collected, the agreed service, security and dispute handling, and applicable accounting, tax, anti-fraud, or other legal retention duties. Retention therefore varies by record type and engagement.

Your rights and requests

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it where no overriding retention duty applies. You may also object to or request restriction of certain processing where applicable. Send any such request to hello@pocketledger.ae and we will respond by email. We may need to verify your identity and authority before acting on a request, and may retain records needed for legal claims or another applicable exception. Data Deletion Request sets out what to send for a deletion request and what happens next.

Changes to this policy

If this policy changes, we will update this page and revise the effective date above.

Contact

Questions about privacy at PocketLedger can be sent to hello@pocketledger.ae.