Privacy Policy

1. Who we are

Fly Fly Acct (“we”, “us”, “our”) is operated by SophieSoft Company Limited and provides a multi-tenant accounting platform that helps users manage financial workflows, documents, and reporting.

In many deployments, Fly Fly Acct is operated by an organization (for example, an accounting firm or a company) that invites users and configures companies. That organization may act as the data controller for your account and company data.

2. Information we collect

Depending on how the platform is configured, we may collect:

• Account information (name, email address, authentication identifiers).
• Company/workspace information (company name, locale, settings).
• Accounting data you enter or import (transactions, accounts, reports).
• Uploaded files and metadata (invoices, receipts, statements).
• Usage and device data (log events, IP address, browser/device identifiers).

3. How we use information

We use information to:

• Provide, operate, and maintain the platform and its features.
• Authenticate users and enforce access controls (including company isolation).
• Process documents and data to deliver requested functionality (e.g., extraction, categorization, reports).
• Monitor performance, debug issues, and improve reliability and security.
• Communicate with you about service updates and support.

4. AI and automated processing

If enabled, the platform may use automated processing to extract or classify data from uploaded documents. Outputs are intended to assist workflows and may require human review. Administrators may configure AI providers and models.

Where AI features are enabled, data sent to third-party AI providers depends on configuration. Your administrator controls which providers are used and what data is submitted for processing.

5. How we share information

We may share information:

• With service providers that support platform functionality (hosting, storage, email delivery, analytics) as configured.
• Within your company/workspace, according to user roles and permissions.
• To comply with applicable law, lawful requests, or to protect rights and safety.
• In connection with a corporate transaction (e.g., merger, acquisition), subject to appropriate safeguards.

6. Data retention

We retain information for as long as needed to provide the service, meet contractual obligations, and comply with legal requirements. Retention periods may be configured by your administrator depending on company and compliance needs.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. However, no system can be guaranteed 100% secure.

8. Your choices and rights

Depending on your location and role (end-user vs. company admin), you may have rights to access, correct, export, or delete your information. Some requests may need to be handled by your organization’s administrator if they are the controller.

9. International transfers

Your information may be processed in locations different from where you live, depending on your deployment and service providers. Where required, appropriate safeguards should be used.

10. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice through the platform or other channels.

11. Contact

If you have questions about privacy, contact us at [email protected] or use the Contact page to reach the configured support or sales channels.