Our service and your data
RequestZen helps accounting firms securely request, collect, and track client documents. This policy explains how we handle personal data when you use the service.
What we collect
We collect your account email, organization details such as firm name and team membership, client contact names, email addresses, and phone numbers that firms enter, and documents and information clients upload to requests. The service sends reminder emails to clients on a firm’s behalf. We also collect technical information needed to operate and protect the service, including access logs and basic technical information.
How we use information
We use information to provide, secure, and improve the service, including anonymous usage analytics: signing you in, organizing requests and documents, delivering service emails, supporting users, and maintaining security and reliability. We do not sell personal data or use uploaded documents for advertising.
Security and access
Data is encrypted in transit, and stored with infrastructure providers that encrypt data at rest, together with access controls that limit access to authorized users and service personnel who need it to operate or support the service. No online service can guarantee absolute security. Keep sign-in codes and client upload links private.
Service providers
We use service providers for authentication and database hosting (Supabase), email delivery (Resend), file storage (Railway), malware scanning of uploaded files, product analytics (PostHog), and optional sign-in providers (Google and Microsoft). These providers process information on our behalf for those purposes. We may also disclose information when required by law or necessary to protect the service and its users.
Document ownership
Uploaded documents remain the property of the firm or client who owns them. Firms determine what to request and how to use client documents. If your firm invited you to upload information, contact that firm about its own privacy practices or access to your documents.
Retention and deletion
We retain account information and documents while needed to provide the service. Uploaded files are automatically deleted after the retention period set on each request, counted from when the request is completed, cancelled, or expired. On account closure, we delete or de-identify associated data, subject to legal retention requirements and limited backup retention. Backup copies are removed through normal backup rotation. Contact us to request account closure, access, correction, or deletion of your information.
Contact and updates
For questions or privacy requests, email hello@requestzen.com. We may update this policy as the service changes and will communicate material changes through the service or email.
Last updated: November 2026.