What happens to a document you upload

Accrobo is a product of Parami Co. Limited, a company in Hong Kong. Our mailing address is 316A, 3/F, 5W, HKSTP, Pak Shek Kok, New Territories, Hong Kong. Write to info@parami.ai about anything on this page. Your use of the product is governed by Hong Kong law and by our terms.

Your account. We decide to collect your name, your email and a record of what you did in the app, because accounts do not work without them. That is ours to answer for.

Your documents. You choose what to upload and why. We hold and read them because you told us to, and for nothing else: Parami does not train on them, show them to another customer, or use them for any purpose beyond returning your figures. What the AI provider below does with a document is a separate question, answered separately, because we have not verified the answer.

Hong Kong law expects your firm to bind its processor in writing on retention and security. We do not have that paperwork with you yet. If your practice needs it, tell us and we will sort it out.

An uploaded document sits in private storage. It has no public address, and the only way to read it back is a request carrying your own signed-in session.

To read the figures off it, we send it to MiniMax (model minimax/minimax-m3), a company headquartered in Shanghai, reached through the Vercel AI Gateway. We name it because "we use AI" is not an answer to "who sees my client's bank statement". Shanghai is outside Hong Kong, so this is a cross-border transfer and you need to be able to tell your own clients so.

Three things we have not done, and will not imply we have. We have not checked what that provider keeps, so this page will not tell you it keeps nothing. We have not put the Privacy Commissioner's model contract clauses in place for the transfer. And we do not claim a country for the file storage or the cache, because those are settings we have not read off and confirmed. Ask us about any of them and you will get a written answer rather than a reassurance.

• Clerk — accounts and sign-in. Holds your email and name, never documents.
• Vercel — runs the application, stores the uploaded files, keeps server logs.
• MiniMax, via the Vercel AI Gateway — reads each document to extract the figures. In Shanghai, as described above.
• Upstash — a short-lived cache of extracted figures, so re-opening a document does not re-read it, plus the counters behind upload limits.

Documents and the figures read from them are kept until you delete them — deleting removes the original file, the extracted figures and the cached copy. There is no automatic expiry.

Your account details last as long as your account. Close it by writing to info@parami.ai.

Deleting a document removes three things: the original file, the figures read from it, and the cached copy. The file goes first, so an interrupted delete can leave a record with no document behind it, never an invisible document.

One trace survives. A deleted document leaves a tally mark recording that a document was processed and in which month. It is a one-way scrambled value: it carries no file, no figures, no client, no amount, and no way to work out which document it came from, not even for us. It exists so that a monthly count cannot be reduced by deleting the evidence, which is what makes the count trustworthy as a bill.

Each client is its own workspace with its own documents and its own members. A request carrying the wrong workspace is refused, not filtered. Documents are addressed by a path built from the workspace in your session, never from anything the browser sends.

Delete any document yourself from the documents page. To ask what personal data we hold about you, to have it corrected, to get the paperwork above, or to raise anything this page does not answer, write to info@parami.ai. The law gives us 40 days to answer an access request and we will not need them. If something here turns out to be wrong, tell us and we will fix the page and the software it describes.

If you think we have handled personal data wrongly you can complain to the Privacy Commissioner at pcpd.org.hk. We would rather you told us first.