What Daftrah processes
Account and company details, customer and supplier records entered by a merchant, invoices and financial workflow records, authentication and security events, support messages, and provider transaction references needed to operate the service.
Why it is processed
- Provide authenticated business workspaces and customer portals.
- Create, preserve, and export merchant records.
- Send transactional messages only when enabled and permitted.
- Prevent abuse, investigate errors, and protect accounts.
- Process subscriptions or test payments through configured providers.
Roles and responsibility
A merchant controls the business and customer data it enters. Daftrah processes that data to provide the service. Merchants remain responsible for having a lawful basis to enter and communicate with their customers and employees.
Service providers
The application is designed to use Supabase for database/authentication, Vercel for hosting, Stripe for supported U.S. billing/payment test flows, Resend for transactional email when activated, and consent-gated Google Analytics. The final production provider list and transfer disclosures require hosted verification before publication.
Choices and requests
Workspace owners can request an export or account-data review from the Support & Security area. Financial and legal records may need to be retained even when other account data can be deleted. Requests can also be sent to contact@daftrah.com.
Security and retention
Access is tenant-scoped and sensitive provider credentials are designed to remain server-side. No online system is risk-free. Production backup, restoration, monitoring, retention schedules, and incident contacts must be verified before launch; see the Security page.