Who we are
Wavai Technologies, based in Kuwait, operates Qaid. Contact: hello@myqaid.com.
Data we collect
- **Account data:** your name, email address, password (stored as a hash), language preference.
- **Company data:** company name, country, currency, tax settings, logo, address, VAT registration and bank details you enter for invoices.
- **Financial records you create:** transactions, journal entries, invoices, customers, vendors, employees and payroll details, chat messages with the assistant, documents you upload or email to your inbox address, and bank statements you import.
- **Technical data:** IP address, browser and device information, request logs and aggregate, cookieless web analytics on the marketing site (Vercel Web Analytics). If Google Analytics is enabled on the marketing site, it is configured without advertising features.
- **Emails you send to your inbox address:** sender, subject, body and attachments, which are processed into drafts.
How we use data
- To provide the service: keeping your ledger, drafting entries, generating reports and invoices, sending transactional email.
- To operate AI features: sending the text, document contents and minimal ledger context needed to Anthropic's Claude API, which returns drafts and answers.
- To secure the service: authentication, rate limiting, audit logs, incident response.
- To improve the product: aggregate usage metrics. We do not train AI models on customer data.
- To communicate: product updates and support replies. You can opt out of non-essential email.
Sub-processors
| Provider | Purpose | Policy |
|---|---|---|
| Vercel | Hosting, edge network, web analytics | vercel.com/legal/privacy-policy |
| Supabase | Database, authentication, file storage | supabase.com/privacy |
| Anthropic | AI model processing | anthropic.com/legal/privacy |
| Resend | Transactional email and inbound receipt email | resend.com/legal/privacy-policy |
Sharing
We do not sell personal data. We share data only with the sub-processors above to run the service, when you choose to share (for example a public invoice link), or when required by law.
Retention
We keep your data while your account is active. When you request deletion of a company or account, we delete the ledger, documents, inbox address and associated records from the production systems; platform-level backups expire on the provider's schedule. Audit and security logs may be retained for a limited period for legitimate security purposes.
Your rights and choices
- **Access and export:** request a copy of your data by emailing hello@myqaid.com from your account address.
- **Correction:** update account and company details in the app.
- **Deletion:** request deletion of a company or your account by email.
- **Objection/marketing:** unsubscribe from non-essential email at any time.
Cookies
The application uses strictly necessary cookies for authentication and your language preference. The marketing site uses Vercel Web Analytics, which does not use cookies or track individuals across sites. Any optional analytics are disclosed on this page.
Security
See the security page for a factual description of controls, encryption and limitations.
Children
Qaid is a business tool and is not intended for children under 18.
Changes
We will post changes to this policy here with an updated date. Material changes will be announced in the app or by email.
Last reviewed: