Filsa Business — Privacy Policy

Last updated 6 October 2026 · العربية

This policy describes how Filsa Business handles information when you use the Filsa Business mobile application and its related services.

Filsa Business is operated by UXUI W.L.L., Commercial Registration 124544-2, Building 7480, Road 3835, Block 305, Manama, Kingdom of Bahrain. For any privacy question or request, contact support@weuxui.com.

Information we handle

• Your phone number, name, selected currency, device or session identifier, and push token.
• Business profile and registration details you enter — legal, address, tax, banking, auditor and account information.
• Financial records — transactions, categories, balances, invoices, clients, liabilities, VAT information, supporting notes and reports.
• Documents, receipts, invoices and images you choose to upload.
• If you use voice dictation to add a transaction: the words you speak. Your audio is transcribed by your device's speech-recognition service (Google on Android, Apple on iOS); Filsa receives and keeps only the text you confirm — never the recording. Dictation is optional and only starts when you tap the microphone.
• If you connect a mailbox: for Gmail, the connection authorization; for Outlook or another IMAP mailbox, the app password you provide, which we store encrypted and use only to fetch mail. In both cases we read only messages from the bank senders you select for analysis. Nothing else in your mailbox is read. Disconnecting deletes the stored authorization or password, and for Gmail also revokes our access at Google.
• If you turn on the optional bank SMS sync (Android only): the app reads the sender IDs in your SMS inbox on your phone so you can pick your bank's sender; the sender IDs you pick are saved with that bank account. When you tap refresh, it sends up to 100 messages from the bank senders you registered, from the last 31 days, to Filsa to create financial records for your review. No other messages leave your phone, the app never sends SMS, and it does not read SMS in the background. The iOS app cannot access SMS.
• If you invite someone to a business: the name and phone number you give us for them, so we can send that person a text message inviting them and give them access once they accept. Please invite only people who expect to hear from you.
• Technical security and reliability information such as request identifiers, authentication failures and service errors. Our application logs are designed not to contain phone numbers, tokens, document names, business identifiers or financial payloads.

How we use information

To authenticate you; to provide bookkeeping, invoicing, liability, VAT, document, reporting, email- and SMS-import and notification features; to generate transaction suggestions for your review; to answer requests you make through Ask Filsa; to protect accounts; to diagnose failures; and to comply with applicable law.

Document extraction, analysis of the bank emails and bank SMS you select, and Ask Filsa may send the content needed for that feature to Google Gemini. AI-generated results can be inaccurate and should be reviewed before you save or rely on them.

We do not use your financial information for advertising, and we do not sell it. Filsa Business contains no advertising SDK, requests no advertising identifier, and does no tracking across apps or websites.

Service providers

We use service providers only to operate Filsa Business, under their terms and our instructions:

• cloud hosting and a managed database;
• private object storage with token-protected content delivery;
• Google OAuth for the optional read-only Gmail connection, and Google Gemini for document, email, bank SMS and Ask Filsa analysis;
• your device's speech-recognition service (Google on Android, Apple on iOS) for the optional voice dictation feature;
• Firebase Cloud Messaging for push notifications;
• Twilio for one-time-password and business-invitation text messages;
• currency-rate data services.

We may also disclose information where required by law, to protect rights and security, or as part of a lawful business transfer with appropriate safeguards.

Security

Filsa Business uses encrypted network connections, authenticated tenant-isolated access, encrypted storage for mailbox credentials, private media storage and expiring signed media links. No system can guarantee absolute security. Keep your device and verification codes secure, and contact us if you suspect unauthorised use.

Retention and deletion

We retain account and business information while it is needed to provide the service, and for any period required by applicable accounting, tax, fraud-prevention or legal obligations in the Kingdom of Bahrain.

You can delete your account in the app at Settings → Delete account, or start the request at legal.filsa.ai/delete-account. Deletion removes your identity, the businesses you own and their records, private uploaded media, mailbox connections and associated credentials. If you were a member of a business owned by someone else, that owner's accounting records are preserved while your membership and personal attribution are removed. Some information may be retained where legally required, in secured backups until their normal expiry, or to resolve disputes and enforce agreements.

You may disconnect an email account at any time, and you can revoke SMS permission in Android settings at any time. Either stops all future access to that source; records already created from messages remain until you delete them or delete your account, subject to legal retention duties.

Your choices and rights

Depending on applicable law you may request access, correction, deletion, restriction, objection, or a copy of your personal information. You can decline the optional Gmail connection, bank SMS sync and document upload, disconnect Gmail or revoke SMS permission at any time, manage notification permission in device settings, and delete your account in the app. Write to support@weuxui.com; we may need to verify your identity before completing a request.

Children

Filsa Business is a business tool intended for adults and is not directed to children.

International processing and changes

Service providers may process information outside Bahrain, under contractual safeguards appropriate to the transfer. We may update this policy when the service or the law changes; material changes will be communicated as required.