Privacy Policy

Headquarters (“we”, “us”) is a private records and compliance workspace for a single registered company. This policy explains what we collect, why, and the choices you have. It covers the Headquarters web application only.

What we collect

• Account details, your email address and an encrypted password, handled by our authentication provider.
• Company documents you upload, files such as your Certificate of Incorporation, MOA/AOA, PAN, TAN, and GST certificate.
• Data extracted from those documents, structured fields such as CIN, PAN, TAN, GSTIN, directors, and dates.
• Technical data, basic logs needed to run and secure the service.

How we use it

We use your data only to provide the service: to store your documents, build your company profile, work out the compliance deadlines that may apply to you, and (if you turn them on) send you reminders. We do not sell your data or use it for advertising.

Document reading and AI

When you upload a document, its contents are sent to Anthropic’s Claude API to read it and extract the structured fields. This is how the profile fills itself. Your documents are not used to train AI models. We only send a document when you upload it for this purpose.

Where your data lives (subprocessors)

• Supabase, database and private file storage. Your files live in a private bucket, reachable only through short-lived signed links.
• Vercel, application hosting.
• Anthropic, reading uploaded documents to extract fields.
• Resend, sending deadline-reminder emails, if enabled.

Security

Each company’s data is isolated at the database level: you can only read and write your own records. Uploaded files sit in a private store accessed via expiring signed URLs, and data is encrypted in transit. No system is perfectly secure, but access to your workspace requires your login.

Keeping and deleting your data

We keep your data while your account is active. You can delete your account at any time from Settings; deleting it removes your company records and documents. Backups and logs may persist for a short period before rotating out.

Your choices

You can access and correct your profile in the app, delete your account, and turn reminder emails off. To ask a question about your data, contact us at the address below.

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

Contact

Questions about privacy: privacy@headquarters.ltd. We may update this policy; we’ll change the date above when we do.