Privacy Policy

Effective Date: 10/10/2025

Entity: Vysor Innovation Limited (C106569)

Registered Address: Centris Business Gateway II, Level 2A, Triq is-Salib tal-Imriehel, Z3, Central Business District, Birkirkara, CBD3020, Malta

Email: [email protected]

Website: https://azora.mt

1. Introduction

Azora (“we”, “our”, “us”) is a software-as-a-service (SaaS) platform operated by Vysor Innovation Limited, registered in Malta.
We provide tools that allow clients to upload and process financial documents (such as receipts and statements), and to manage scheduling for VAT, payroll, and other accounting-related obligations.

This Privacy Policy explains how we collect, process, and protect personal data in connection with the Azora platform and related services.

By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller and Data Processor Roles

• Direct clients (e.g., accounting firms, businesses): Vysor Innovation Limited acts as a data processor processing data on behalf of the client, who is the data controller.
• Website visitors and client account data (e.g., billing, admin users): Vysor Innovation Limited acts as the data controller.

A separate Data Processing Agreement (DPA) is available upon request to govern controller–processor relationships under Article 28 GDPR.

3. Information We Collect

• Uploaded documents: Receipts, invoices, statements, and other financial files submitted manually or by email.
• Extracted data: Totals, supplier information, VAT numbers, tax data, payroll and statutory filing details.
• Account information: Names, company details, email addresses, login credentials, and related identifiers.
• Communication data: Support messages, feedback, and correspondence.
• Technical data: IP addresses, browser type, usage logs, and cookies used to operate and secure the platform.

We do not collect or store payment card information. All subscription payments are handled by external payment processors.

4. How We Use Personal Data

• Provide and maintain Azora’s services.
• Extract and structure information from uploaded receipts and documents.
• Facilitate scheduling for VAT, payroll, and other compliance tasks.
• Communicate with clients and provide technical support.
• Improve, monitor, and secure the platform.
• Comply with legal obligations under Maltese and EU law.

5. Legal Bases for Processing

• Contractual necessity — to provide and support the Azora service.
• Legal obligation — for compliance with financial, tax, and data protection laws.
• Legitimate interests — to maintain and improve our systems and prevent abuse.
• Consent — where required for specific activities (e.g., marketing communications).

6. Data Retention

Data is retained only as long as necessary to provide the service or as required by law.
Upon account termination or written request, user data is deleted or anonymized within a reasonable timeframe, except where retention is legally required (e.g., for audit or tax compliance).

7. Sub-Processors and Data Sharing

We may engage trusted third parties to provide essential infrastructure and processing services.
These include:

• Google Gemini AI – used for document scanning and data extraction (AI/OCR).
• Hetzner, OVH, and DigitalOcean (EU) – used for secure cloud hosting and data storage.

All sub-processors are bound by contractual agreements ensuring GDPR-level protection and may process data only for purposes consistent with this Privacy Policy.
We do not sell or rent personal data to any third parties.

8. International Data Transfers

All primary data storage and processing occur within the European Union.
Where transfers outside the EU occur (e.g., via Google services), they are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) under GDPR.

9. Security

We maintain appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction, including encryption, access controls, and regular audits.

10. Data Subject Rights

Under GDPR, individuals have the right to:

• Access their personal data;
• Request correction or deletion;
• Restrict or object to processing;
• Data portability;
• Lodge a complaint with a supervisory authority (e.g., the Information and Data Protection Commissioner in Malta).

Requests may be sent to [email protected].

11. Cookies

Azora uses cookies and similar technologies to ensure platform functionality and analytics.
Users may disable cookies in their browser, though this may affect service functionality.

12. Updates to this Policy

We may update this Privacy Policy periodically. The latest version will always be available on azora.mt.
Continued use of our services after updates constitutes acceptance of the revised terms.

13. Contact

For any questions regarding this Privacy Policy or your data rights, contact:
[email protected]
Vysor Innovation Limited,
Centris Business Gateway II,
Level 2A, Triq is-Salib tal-Imriehel,
Z3, Central Business District,
Birkirkara, CBD3020,
Malta