Privacy Policy

Depending on how you use Sturen, we may process the following information.

Account and identity information

This may include:

• your name;
• telephone number;
• email address;
• messaging-platform user or account identifiers;
• profile name or other information supplied by a communication platform;
• organization or company with which you are associated;
• your role or permissions within an organization.

Messages and conversation content

When you communicate with Sturen, we may process:

• messages you send;
• commands and requests;
• responses generated by the service;
• conversation history necessary to provide the service;
• message timestamps and identifiers;
• delivery and processing status.

Files and attachments

Where supported, we may process files or other content that you voluntarily send to Sturen.

These may include business or accounting documents.

Users should not send information that is unnecessary for the requested service, particularly passwords, authentication credentials, full payment-card numbers, or other highly sensitive credentials.

Business and accounting information

If you are authorized to access accounting or business information through Sturen, the service may process information such as:

• company names;
• ledger information;
• invoices;
• vouchers;
• transactions;
• balances;
• accounting reports;
• tax-related information;
• document metadata;
• other business records required to respond to an authorized request.

Access to such information is subject to the permissions assigned to the user and organization.

Technical information

We may automatically collect limited technical information required to operate and secure the service, including:

• request timestamps;
• IP addresses where applicable;
• application and server logs;
• error information;
• authentication events;
• security events;
• webhook and API metadata;
• device or browser information where applicable.

When you communicate with Sturen through WhatsApp, information is transmitted through the WhatsApp Business Platform operated by Meta.

Depending on the interaction, Sturen may receive information such as:

• your WhatsApp telephone number;
• your WhatsApp profile name, where available;
• messages you send to us;
• files or media you send to us;
• message identifiers;
• message timestamps;
• delivery and message-status information.

We use information obtained through WhatsApp only as reasonably necessary to provide, operate, secure, and support the Sturen service and the conversation or business workflow requested by the user.

WhatsApp and Meta separately process information in accordance with their own terms and privacy policies.

We may use information to:

• provide and operate Sturen;
• identify and authenticate users;
• determine the organization or company a user is authorized to access;
• process and respond to messages;
• retrieve authorized business or accounting information;
• execute authorized application functions;
• maintain conversation context;
• process documents where supported;
• provide AI-assisted responses;
• maintain audit and security records;
• detect misuse, fraud, unauthorized access, or security incidents;
• diagnose errors and maintain service reliability;
• provide customer support;
• comply with applicable legal and regulatory requirements.

We do not use a company identifier supplied in a conversation as sufficient authority to access that company's information. Access is determined using server-controlled identity, membership, authorization, and integration configuration.

Sturen may use artificial intelligence and other automated systems to interpret user requests, generate responses, classify information, extract structured information, or assist with business and accounting workflows.

AI-generated information may contain errors and should not automatically be treated as a verified accounting record.

Where an operation affects accounting records or other controlled business data, additional authorization, validation, or application-level controls may apply.

Sturen does not rely solely on AI instructions or conversation content to determine whether a user is authorized to access or modify protected information.

Unless we separately notify users and obtain any consent required by applicable law, content received through private business communications is not used to train general-purpose AI models for unrelated purposes.

Users may only access information belonging to companies or organizations for which they have been granted appropriate access.

Sturen uses application-controlled authorization mechanisms to determine:

• the user's identity;
• organization or company membership;
• active company context;
• permitted operations;
• access to connected accounting or business systems.

Users must not attempt to access another company's information without authorization.

We do not sell personal information.

We may disclose information where necessary to provide the service to:

• infrastructure and hosting providers;
• communication providers such as WhatsApp or Telegram;
• authorized accounting or business integrations;
• service providers processing information on our behalf;
• authorized members of the organization or accounting practice responsible for the relevant workspace;
• government, regulatory, judicial, or law-enforcement authorities where disclosure is legally required.

Service providers are given access only to information reasonably necessary to perform their functions.

We do not disclose WhatsApp-derived user information for advertising, data brokerage, unrelated profiling, or other unrelated commercial purposes.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, destruction, or misuse.

Depending on the system involved, safeguards may include:

• authentication and authorization controls;
• tenant and company access isolation;
• restricted service credentials;
• encrypted communications;
• private infrastructure;
• audit logging;
• access monitoring;
• least-privilege service permissions;
• controlled access to connected accounting systems.

No electronic system can guarantee absolute security.

Users are responsible for protecting access to their own devices, messaging accounts, passwords, and authentication credentials.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including:

• providing the service;
• maintaining business records;
• maintaining security and audit records;
• resolving disputes;
• preventing abuse;
• complying with contractual requirements;
• complying with legal, tax, accounting, or regulatory obligations.

Different categories of information may have different retention periods.

Information contained in backups may remain for a limited additional period before being overwritten or securely removed.

Users may request deletion of personal information associated with their use of Sturen.

To request deletion, contact:

Email: developers@sturen.tech

Please include enough information for us to identify the relevant account, such as:

• your name;
• your telephone number or messaging account;
• the company or organization with which you interacted, if applicable;
• the communication channel used.

We may need to verify your identity before processing a deletion request.

Following verification, we will delete or anonymize information that we are not required or permitted to retain.

Certain information may be retained where reasonably necessary for:

• legal or regulatory obligations;
• accounting or audit requirements;
• fraud and security prevention;
• resolving disputes;
• demonstrating authorization or compliance.

Deletion from active systems may occur before deletion from backup systems.

Depending on applicable law, you may have rights relating to your personal information, including the right to:

• request information about how your data is processed;
• request access to personal information;
• request correction of inaccurate information;
• request deletion of information;
• withdraw consent where processing depends on consent;
• object to or restrict certain processing;
• raise a complaint concerning the handling of your information.

Requests may be sent using the contact information below.

When you interact with Sturen through third-party platforms such as WhatsApp or Telegram, those platforms may independently collect and process information.

Their processing is governed by their respective privacy policies and terms.

Sturen is not responsible for the independent privacy practices of third-party platforms.

Where Sturen is used by an accounting practice, business, or other organization, that organization may determine how certain information relating to its users, employees, customers, or business records is processed.

In these circumstances, Sturen may process information on behalf of that organization as necessary to provide the requested services.

Questions about information controlled by an organization may need to be directed to that organization.

Sturen or its service providers may process information using infrastructure located in different jurisdictions.

Where required by applicable law, appropriate safeguards will be used for transfers of personal information between jurisdictions.

Sturen is intended for business and professional use and is not designed for use by children.

We do not knowingly solicit personal information from children through the Sturen Accountant service.

We may update this Privacy Policy as the Sturen service, applicable laws, or our data-processing practices change.

The current version will be published at:

https://www.sturen.tech/privacy

The effective date at the top of this Policy identifies when the current version became effective.

Questions, privacy requests, and data-deletion requests may be directed to:

Sturen Tech Private Limited

Privacy contact: developers@sturen.tech

Website: https://www.sturen.tech

For privacy-related requests, please include sufficient information for us to identify your account and the service through which you interacted with Sturen.