Privacy Policy

Account and profile data: name, email, business details (industry, municipality, stage, legal structure, etc.).

Content you upload: receipts, financial statements, invoices, your clients’ information and other documents you load into the platform.

Financial data you record: income and expenses in the monthly record, cash and reserves in cash flow, debts, savings goals and other figures you enter for the finance tools.

Payment data: handled by Stripe. We do not store card numbers; we only keep customer identifiers and subscription status.

Usage data: basic technical information (logins, pages visited) to operate and improve the service.

To provide and maintain the service, authenticate your account, process payments, send you relevant notices (for example, new incentives matching your profile) and improve the platform.

We do not sell your personal information.

When you use AI features, the necessary content (for example, a receipt image or a document’s text) is sent to our AI provider (Anthropic) to process it and return the result to you.

This data is processed to provide the service and is not used to train third-party AI models.

If you choose to connect a bank account, we use Plaid Inc. ("Plaid") to retrieve your financial data: transactions, balances and basic account information. Your bank credentials are entered directly in Plaid's secure interface · KontaPR never sees or stores them.

We use this data solely to provide the service: automatic bookkeeping, financial statements and reports for you or your clients. We do not sell or share it for any other purpose.

Plaid access tokens are stored encrypted. You can disconnect your bank at any time from the platform; doing so deletes the connection and its synced transactions.

Your use of Plaid is also governed by Plaid's End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy.

We share data with providers that help us operate: Supabase (database, authentication and file storage), Stripe (payment and subscription processing), Plaid (read-only bank connectivity), ATH Móvil Business (payment collection for accountants who enable it), Anthropic (AI processing of accounting data and documents), Resend (email delivery), Google Calendar and Microsoft/Outlook (calendar sync if you connect it), Vercel (hosting and performance metrics), and Sentry (error monitoring, with personal-data scrubbing). They act as data processors: they process data on our behalf and only for the purposes described.

With your consent, we also use analytics tools: Google Analytics and PostHog (see the Cookies section and the Cookie Policy). They are not enabled until you accept.

We may disclose information if required by law or to protect rights and safety.

If you are an accountant or consultant, you may manage your clients’ profiles and grant them read-only access to their portal. You are responsible for obtaining your clients’ consent to handle their information in KontaPR.

We use strictly necessary cookies to keep you signed in and to operate and secure the site. These do not require consent.

With your permission, we use product and web analytics cookies and storage (Google Analytics and PostHog) to understand usage and improve KontaPR. They do not load until you choose "Accept analytics" in the cookie notice, and you can change your choice anytime from "Cookie preferences" in the footer.

We do not use advertising cookies or session replay. Details for each cookie are in our Cookie Policy.

We keep your information while your account is active and as needed to meet legal obligations. You may request deletion of your account and associated data.

We apply reasonable technical and organizational measures to protect your information (encryption in transit, row-level access controls in the database, rate limiting, and two-factor authentication available for Business accounts). No system is 100% secure, but we work to protect you.

We maintain an incident response plan. If a security breach compromises your personal information, we will take steps to contain it and assess its scope, and we will notify you without undue delay when required by applicable law.

Where applicable, we will also notify the competent authorities. In Puerto Rico, this may include notifying affected individuals and the Department of Consumer Affairs (DACO) under Act No. 111 of 2005 ("Citizen Information on Data Bank Security Act") and other applicable regulations.

The notice will describe, to the extent possible, what information may have been affected, the measures we took, and recommendations to protect you.

You may access, correct or delete your information, and request a copy of your data. To exercise these rights, contact us at info@kontapr.com.

KontaPR is a service for businesses and professionals, is not directed to minors, and is not intended for anyone under 18. When you register you confirm you are of legal age.

We do not knowingly collect information from children under 13. If you believe a child provided us data, contact us at info@kontapr.com and we will delete it.

We may update this Policy. We will post the current version with its update date.

The data controller is Digital Studio & More (trade name of AJRLEXX Enterprises LLC), Bo. Quebradillas, Carr. 773 Km 3.2, Barranquitas, PR 00794.

For privacy questions or requests about your data, contact us at info@kontapr.com or 787-665-9911.