Privacy Policy
This policy explains what personal data Cenqra collects, why, who else handles it, and your rights.
Who we are
Cenqra Accounting (“Cenqra”, “we”) is an online accounting service operated by Cenqra Limited, a company registered in Hong Kong, at Room 1001, 10/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong. Privacy contact: support@cenqra.com.
For the accounting records you put into Cenqra (your customers, suppliers, employees, invoices, bank lines), your company is the controller and we act as its processor: we process that data only to provide the service, under our Data Processing Agreement. For your own account and billing details (name, email, sign-in activity, payments), we are the controller.
What we collect, why, and on what basis
| Data | Why we use it | Basis |
|---|---|---|
| Account: name, email, password (stored only as a bcrypt hash), email confirmation, and if you turn on two-step sign-in an encrypted authenticator secret and hashed recovery codes | To create and secure your account and sign you in | Contract |
| Billing: the company’s plan, payment status, invoices and receipts we issue, and payment references from our payment provider (we do not store full card numbers) | To charge for the subscription, issue invoices and keep tax records | Contract; legal obligation |
| Security records: sign-ins and failed sign-ins, password and two-step changes, file downloads, with time, IP address and browser description | To protect accounts, show you your own sign-in activity and detect attacks | Legitimate interest (security) |
| Your company’s books: company details, chart of accounts, contacts, invoices, bills, payments, bank lines, stock, fixed assets, attachments, emails sent from the app, activity log | To provide the accounting service you asked for | Contract (we are processor) |
| Payroll, if you use it: employee names, identifiers, salaries, allowances, deductions, bank details and social-security declarations. Only owners, admins and accountants of that company can see it | To run payroll for your company | Contract (we are processor) |
| Scanned documents you choose to scan | To read the figures from the file with an AI provider | Contract (we are processor) |
| Support messages you send us | To answer you | Contract; legitimate interest |
We do not use your books for advertising, do not sell personal data and do not use your data to train AI models.
Who receives it
| Recipient | What for | Where |
|---|---|---|
| Railway Corporation | Hosting of the app and its database | United States (San Francisco region) |
| Resend | Sending emails you ask the app to send (invoices, statements, account emails) | United States |
| Anthropic | Reading documents you choose to scan, and AI assistance you use, only when you use those features | United States |
| Paddle.com Market Limited | Merchant of Record: takes payment for subscriptions it processes, collects and pays tax, issues its receipt, handles refunds and fraud checks. Paddle is an independent controller of the payment data it collects; see its privacy notice | United Kingdom and as stated by Paddle |
| Other payment providers (for example a card gateway) | Taking subscription payments, where used | As stated by the provider |
| Your e-invoicing, payment and bank-feed providers | Only if you connect them | Chosen by you |
| GitHub | Hosting our source code (contains no customer data) | United States |
We may also share data with professional advisers, and with authorities where the law requires. Because data is stored outside Hong Kong and the UAE, we rely on contractual safeguards with these providers and on the security measures below.
How we protect it
- All traffic is encrypted (HTTPS with HSTS). The database is not reachable from the internet and its disk is encrypted by the host.
- Each company’s data is kept separate, and every release is tested with an automated attack that tries every route against another company’s data.
- Passwords are hashed (bcrypt). Two-step secrets are encrypted (AES-256-GCM). One-time links and recovery codes are stored only as hashes.
- Limits on wrong passwords and codes, email confirmation, invitations that only the invited address can accept, “sign out everywhere”, and optional two-step sign-in that a company can require.
- Security alerts to our operator for unusual sign-in failures, lock-outs, server errors and download volumes.
- Database backups are kept by our host and overwritten as they expire.
How long we keep it
- Your company’s books: while the company exists. An owner can delete the company; after a 14-day waiting period everything is permanently removed, keeping only a small record (company name, who asked, dates). Copies in backups expire in the normal course.
- After a trial or subscription ends, you can export for 90 days before deletion.
- Security records: 180 days. Counters that slow down password guessing: 24 hours.
- Billing and invoice records: as long as tax and accounting law requires us to keep them.
- Your account: until you ask us to delete it by writing to support@cenqra.com.
- Accounting law may require your company to keep its records for several years (for example, UAE tax records are generally kept for at least five years). Export what you need before deleting a company.
Your rights
Depending on the law that applies to you, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and complain to a data protection authority (in the UAE, the UAE Data Office; in Hong Kong, the Privacy Commissioner for Personal Data). For data inside a company’s books, ask that company first, as it controls that data. Write to support@cenqra.com; we answer within 30 days.
Cookies and tracking
The app stores your sign-in token and last opened company in your browser’s local storage, only to keep you signed in. We use no advertising or analytics cookies. Paddle’s payment window may set its own cookies while you pay; see Paddle’s notice.
Security incidents
If a breach affects your personal data, we will tell you and the relevant authority without undue delay, as the law requires.
Changes
We post changes here with a new version date. For material changes we also email account owners.