Effective 19 July 2026

Privacy Notice

This notice explains the main ways Accounting Cycle Pro handles personal and academic data.

1. Who operates the service

Accounting Cycle Pro is operated by Arber Hoti. For privacy questions, access requests, or deletion requests, contact arber.hoti@uni-pr.edu. An institution using the service may also be responsible for deciding how its student data is used.

2. Data we process

We process account identifiers, names, academic department, organization and class membership, assignments, journal-entry submissions, progress, scores, audit records, and limited technical records needed for security. Billing contacts and subscription records are processed for customer workspaces. We do not ask for payment-card details directly.

3. Why we process it

Data is used to provide the learning and assessment service, save progress, produce gradebooks and reports, administer customer workspaces, enforce subscriptions and security controls, prevent abuse, provide support, and meet legal obligations.

4. Service providers

The service uses Vercel for application hosting, Neon for PostgreSQL data storage, Backblaze B2 for private files, Paddle for online billing, and Resend for transactional email when those features are enabled. These providers process only the data needed to perform their services.

5. Retention and deletion

Learning records are retained while the relevant account or institution workspace is active and for the contractual or legal retention period afterward. Suspended or expired workspaces are preserved for export and recovery before scheduled deletion. Short-lived exports and security rate-limit records expire automatically.

6. Security

We use encrypted transport, private tenant-scoped storage, access controls, signed sessions, server-side grade verification, audit logs, backups, and restricted administrative roles. No internet service can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion of your personal data. Students should normally contact their institution first for institution-controlled academic records. You may also contact us directly using the address above.

8. International processing and updates

Service providers may process data in European or other contracted regions with appropriate safeguards. Material changes to this notice will be posted here with a revised effective date.