Your data is encrypted, isolated, and deletable. By design.
Your personal information is encrypted separately from your business data. AI models never see it. You can delete everything in one operation.
Separated by design.
Your personal details and your business data never live in the same place. Names, emails, phone numbers, and IDs are encrypted in a separate location from everything else. The rest of the platform only sees reference tokens — meaningless strings that can't be used on their own.
Each user's data is encrypted with their own unique key. If one account were ever compromised, it gives zero access to anyone else's data.
Your name becomes a reference code.
When you create a contact, upload a document, or save an invoice, personal information is replaced with a reference token before storage. The token is meaningless on its own — it only resolves back to real data through an encrypted lookup that requires your account's key.
What the AI never sees.
Before any message reaches an AI model, a scrubbing layer strips out personal data and replaces it with placeholders. The AI processes only the cleaned version. Your original information is restored in the response sent back to you — the model itself never handles it.
One operation. Everything gone.
When you delete your account, we destroy your encryption keys. Every reference token across the platform becomes permanently unresolvable — your data can't be read, reconstructed, or recovered. One operation, everything gone.
Even if something goes wrong.
| Scenario | What happens |
|---|---|
| Servers are breached | Your personal data is encrypted separately. An attacker would find only meaningless reference tokens. |
| Device is lost | No passwords to steal — we use passwordless login. Sessions expire automatically. Sign in on any device. |
| Simpler shuts down | Export invoices, expenses, contacts as PDF, CSV, JSON. Your data is never held hostage. |
Regional frameworks.
| Framework | Status |
|---|---|
| Malaysia PDPA (2010) | Compliant |
| Singapore PDPA (2012) | Compliant |
| Thailand PDPA (2019) | Compliant |
| Indonesia PDP (2022) | Compliant |
| GDPR (EU) | Architecture-ready |
| CCPA (California) | Architecture-ready |
Ready to try? Still skeptical? Keep scrolling.
Get started