Privacy Policy

DSA Solutions is operated by Constantinos Costa, trading as “Kiyara Products”, of 39 Leoforos Pervolion, 7550 Kiti, Larnaca, Cyprus (“we”, “us”). For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for account and billing information, and a data processor for the business data (customers, invoices, etc.) you store in the Service on behalf of your organization. Contact us at kyanpatrading@gmail.com about anything in this policy.

• Account data: your name, email address, and password (stored securely and hashed by our authentication provider — we never see your raw password).
• Business data you enter: customers, suppliers, products, invoices, quotes, purchase orders, bills, payments, planner jobs, and similar records you or your team create while using the Service.
• Technical data: basic server logs (IP address, timestamps, error logs) generated automatically by our hosting provider for security and reliability. We don't currently use analytics or advertising trackers.

• To provide, maintain, and secure the Service.
• To send you emails you've asked for or that relate to your use of the Service — e.g. team invitations, password resets, invoice emails you choose to send, and (if you switch it on) overdue-invoice reminders to your customers.
• To respond to support requests you send us.
• To comply with legal obligations.

We do not sell your data or your customers' data to anyone, ever.

We use a small number of service providers to run DSA Solutions:

• Supabase — hosts our database, authentication, and file storage.
• Vercel — hosts the application itself.
• Resend — delivers transactional emails (invites, password resets, invoice emails, reminders).

These providers process data on our behalf under their own data processing agreements and don't use your data for their own purposes. We don't share your data with anyone else unless required by law.

Your data is stored with our hosting providers' infrastructure, which may be located outside Cyprus/the EEA. Where that's the case, our providers maintain appropriate safeguards (such as standard contractual clauses) for international data transfers.

We keep your account and business data for as long as your account is active. If you delete your account, your personal account data and (if you're the owner) your organization's business data are permanently deleted, as described below. We may retain minimal records where required by law (e.g. financial records for tax purposes).

As a data subject under GDPR, you have the right to:

• Accessyour data — you can export a full copy of your organization's data at any time from Settings.
• Rectify inaccurate data — edit it directly in the app, or contact us.
• Erase your data — delete your account from Settings, which permanently removes it.
• Object to or restrict processing, or request data portability— contact us and we'll action your request.
• Lodge a complaint with the Cyprus Commissioner for Personal Data Protection.

To exercise any of these rights, use the tools in Settings or email kyanpatrading@gmail.com.

From Settings, any team member can download a complete export of your organization's data (customers, products, invoices, and all other records) as a JSON file, at any time, without needing to contact us.

From Settings, you can permanently delete your account at any time.

• If you're the organization's owner, this permanently deletes your entire organization's data — every customer, invoice, product, and record — and removes access for anyone you've invited. This cannot be undone.
• If you're a team member (not the owner), this deletes your personal account and access only. Your organization's business data is unaffected.

We use a single essential cookie to keep you signed in. We don't use advertising, tracking, or analytics cookies.

We rely on industry-standard security practices from our infrastructure providers, including encryption in transit, row-level access control so organizations can never see each other's data, and role-based permissions within your own organization.

The Service is intended for business use by adults and is not directed at children.

We may update this policy from time to time. We'll update the “Last updated” date above when we do. See our Terms of Service for the terms governing your use of the Service.

Questions, requests, or complaints about this policy? Email kyanpatrading@gmail.com.