← Auttoman

Privacy Policy

Effective 2026-07-29

Auttoman is operated by Maple Collective Group Inc., a Delaware C-Corporation (File No. 10479299), registered at CSC, 251 Little Falls Drive, Wilmington, DE 19808, United States. This policy explains what we collect, who else touches it, how long we keep it, and how to get it back or have it deleted.

We are a bookkeeping service. The documents you send us are your business's financial records. We treat them as confidential, we do not sell them, and we do not use them to train anyone's AI models.

What we collect

  • Documents you send us — bank statements, receipts, invoices and similar records, whether uploaded on the website or sent to us on WhatsApp. We keep the original file and the full structured output our parser produced from it.
  • The books we build from them — transactions, vendors, amounts, dates, bills, and your monthly turnover-tax worksheets.
  • Business details — business name, sector, address, and CRIB (tax registration) number where you give it to us for a filing.
  • Contact details — your name, email address, and WhatsApp number.
  • WhatsApp messages — the messages you send our business number and the replies we send back. Messages that arrive from a number we do not yet recognise are also stored, so a real customer's first message is never silently lost.
  • Sign-in records — when a WhatsApp sign-in code is requested we record the phone number, the time, and the network (IP) address it was requested from. That is what stops someone spraying codes at a number that is not theirs.
  • Server logs — our host records ordinary web request logs (IP address, time, page requested) as part of running the site.

We do not run third-party analytics, advertising trackers, or cross-site cookies. The only cookies set are the ones that keep you signed in.

What we use it for

  • Preparing your books and your monthly turnover-tax declaration.
  • Sending you your filing packs, questions about a document, and reminders — on WhatsApp or by email.
  • Answering your questions about your own books.
  • Keeping the service secure and working (rate limits, error triage).

We do not sell your data, we do not share it for advertising, and we do not use your documents to train AI models. Our AI provider is contractually a processor acting on our instructions, not a party building products from your data.

Who else processes it

Running this service means a small number of specialist companies handle your data on our behalf. They are:

  • Anthropic — reads your statements and receipts and converts them into structured transactions. This is the core of how the service works: local banks only export PDFs, so a machine has to read them.
  • Supabase — stores your account identity (email, phone) and the database holding your business records.
  • Vercel — runs the website and stores your uploaded document files.
  • Twilio — carries WhatsApp messages between you and us, and delivers sign-in codes.
  • Meta — operates WhatsApp itself, the platform those messages travel over.

These providers are based in the United States, so your data is stored and processed there. We will also disclose data where the law requires it, and we will tell you unless we are legally prevented from doing so.

How it is protected

  • Your documents are stored under randomly generated 128-bit addresses that are never published, and they are only ever served through a route that checks you are signed in and that the document belongs to your business.
  • There are no passwords to steal. You sign in with a link sent to your email, or a code sent to your WhatsApp number.
  • A WhatsApp number can only be attached to your account when WhatsApp itself has proven you own it. Typing a number into a form never attaches it to somebody else's business.
  • Sign-in code requests are rate limited, per number and per network address.

How long we keep it

Bookkeeping records are only useful if they last: Sint Maarten businesses are expected to be able to produce their records for past periods, and every line in your ledger stays linked to the source document it came from. That link is the whole point — it is what makes your books defensible to a bank or a tax inspector.

So we keep your documents and books for as long as your account is open, and you decide when they go. When you ask us to delete your account we remove your documents, your books, and your account within 30 days, except where we are legally required to keep something. Records of failed message deliveries and sign-in attempts are kept as a short security and support trail.

Your choices

You can take everything with you, and you can end it. Export your books from your dashboard at any time, and email siddvaswani@wysper.co to get a copy of everything we hold or to have it deleted.
  • Stop the WhatsApp messages — reply STOP to our number at any time. That stops every proactive message immediately. Reply START to turn them back on.
  • See it, correct it, take it, delete it — email us and we will action it.
  • Complain — if we have got something wrong, tell us first; you can also take it to your local data protection authority.

Children

This is a service for registered businesses. It is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy materially we will update the effective date above and tell existing customers before it takes effect.

Contact

Maple Collective Group Inc., CSC, 251 Little Falls Drive, Wilmington, DE 19808, United States. Email siddvaswani@wysper.co. See also our Terms of Service.