2. PRIVACY POLICY (EN) — route /privacy

Last updated: November 5, 2026

1. Who we are

Accurate (accurate.lat) is a B2B collections and accounts receivable management platform operated by Timewise Business Solutions, Tax ID (CUIT) 30-71808484-5, with registered address at Lavalle 333, Ciudad Autónoma de Buenos Aires, Argentina ("Accurate", "we", "us").

Privacy contact: privacidad@accurate.lat

2. Scope

This policy explains what personal data we process when you use the accurate.lat website and the Accurate platform. It includes the data we obtain when you connect your Gmail account through OAuth to send emails from the platform.

3. Roles

• Platform user data (name, email, company, account usage): Accurate acts as the data controller.
• Portfolio data uploaded by each client company (debtors, invoices, contacts, collection activity): Accurate acts as a data processor on behalf of the client company. We process it only on the client's instructions and only to provide the service.

4. Data we collect

• Account data: name, email, role, company and login credentials.
• Portfolio and operational data: debtor information, invoices, balances, collection history and communications, uploaded by the client company.
• Technical data: IP address, browser type, usage logs and cookies (see section 11).
• Google data when you connect your mailbox: the email address of the connected account, basic profile information, and an OAuth access token that allows us to send emails on your behalf.

5. Use of Google user data

When you connect your Google account, Accurate requests only the https://www.googleapis.com/auth/gmail.send scope. With that permission we send, from your mailbox, the collection emails that you or your team configure in the platform.

What we do with this data: - We send messages on your behalf to recipients defined in your company's portfolio. - We record in the platform that each email was sent (recipient, subject, date and status), for collection traceability.

What we do not do: - We do not read, scan or store the contents of your inbox. The requested scope does not allow it. - We do not sell Google user data. - We do not use Google user data for advertising, including personalized or interest-based advertising. - We do not transfer Google user data to third parties. The only exceptions are transfers needed to provide or improve user-facing features, to comply with applicable law, or as part of a merger or acquisition with prior notice. - We do not share Google user data with artificial intelligence providers. - We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. - No Accurate personnel read Google user data, except in these cases: - with your explicit consent for a specific message; - when necessary for security purposes (for example, investigating abuse); - to comply with applicable law; - when the data is aggregated and anonymized for internal operations.

Limited Use disclosure: Accurate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Storage and security

• OAuth tokens are stored encrypted and are used server-side only.
• Data is hosted on Fly.io infrastructure (São Paulo region, Brazil) and on Supabase. All communication is encrypted in transit using TLS.
• Each client company operates in an isolated data environment. Within each company, access is controlled by user role.
• We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration.

7. Service providers (sub-processors)

8. International transfers

Some providers process data outside Argentina, for example in Brazil and the United States. In those cases we put appropriate contractual safeguards in place, in accordance with Argentine Law 25,326 and related regulations.

9. Retention and deletion

• Account and portfolio data are kept for the duration of the contract. They are deleted within 30 days after termination, unless a legal obligation requires us to keep them.
• Google tokens are deleted immediately when you disconnect your mailbox from Accurate.
• You can revoke Accurate's access to your Google account at any time at myaccount.google.com/permissions.
• To request deletion of your data, email privacidad@accurate.lat. We respond within 10 business days.

10. Your rights

Under Argentine Law 25,326, you have the right to access, rectify, update and delete your personal data. To exercise these rights, email privacidad@accurate.lat.

If you are a debtor of a company that uses Accurate, we will forward your request to that company, which is the controller of your data.

The Argentine Agency for Access to Public Information (Agencia de Acceso a la Información Pública), as the supervisory authority under Law 25,326, handles complaints regarding breaches of personal data protection rules.

11. Cookies

We use technical cookies, which are required for sessions to work. On the public website we also use analytics and measurement cookies (Google Analytics 4 and LinkedIn Insight Tag).

12. Children

The service is intended for businesses. We do not knowingly collect data from anyone under 18.

13. Changes to this policy

If we change this policy, we will publish the new version with its update date. If the change is material, we will notify registered users by email.

14. Contact

Timewise Business Solutions · Lavalle 333, Ciudad Autónoma de Buenos Aires · privacidad@accurate.lat