Privacy Policy

1Introduction & Scope

This Privacy Policy explains how NSI CAPITALS ("we", "our", or "us") collects, uses, protects, and discloses personal and business information when you visit our website (nsicapitals.com), schedule consultations with our CPA and ACCA specialists, submit inquiries, or interact with our administrative platforms.

We provide outsourced accounting, financial bookkeeping, and advisory operations to CPA firms, EA practices, and enterprise clients across the United States, United Kingdom, Canada, Australia, and the UAE. Maintaining strict client confidentiality and data integrity is the cornerstone of our operations.

2Information We Collect

We collect information only when reasonably necessary to deliver professional services, schedule consultations, and maintain secure platform operations:

• Contact & Identity Details: Full name, professional title, corporate email address, telephone number, company name, and jurisdiction when submitting booking forms or general inquiries.
• Consultation & Scheduling Preferences: Preferred consultation dates, selected advisory specialists (US CPA or UK ACCA), meeting briefs, and appointment notes.
• Financial & Operational Records: Accounting working papers, ledger records, tax documents, and financial data provided under mutual Non-Disclosure Agreements (NDAs) and formal engagement letters.
• Technical & Usage Data: Anonymized log data, browser type, device information, and interaction metrics used strictly to optimize website accessibility and prevent unauthorized access.

3Google API Services & User Data Policy Compliance

NSI CAPITALS provides content integration features that allow authorized internal administrators to import publication drafts and articles directly from Google Docs into our content management system.

When our administrators link their Google account via OAuth 2.0, our application requests the following minimum read-only permissions:

• https://www.googleapis.com/auth/documents.readonly: Used solely to read document content, formatted text, and headings for converting authorized blog drafts into website articles.
• https://www.googleapis.com/auth/drive.readonly: Used solely to allow administrators to browse and select files within designated Google Drive folders.

Strict Safeguards for Google User Data:

• No Sharing or Sale: We never share, sell, rent, or trade Google user data to any external parties or data brokers.
• No Advertising: Google user data is never used or transferred for serving advertisements, retargeting, or consumer profiling.
• No AI Training: Information accessed via Google APIs is never used to train generalized artificial intelligence (AI) or machine learning (ML) models.
• Encrypted Token Storage: Access tokens and refresh tokens are stored encrypted in secure server environments with restricted access.
• Revocation & Deletion: Administrators can disconnect Google accounts at any time via the admin dashboard, which instantly purges all stored OAuth tokens. You can also revoke access anytime at Google Account Security Permissions.

4How We Use Information

We use collected information solely for legitimate business and professional purposes:

• Conducting initial consultation and scope calls with CPA and ACCA specialists.
• Executing bookkeeping, reconciliation, and tax preparation services under formal contract.
• Sending automated booking confirmations, calendar invites, and rescheduling notices.
• Maintaining institutional data security, preventing fraud, and complying with legal duties.

5International Data Protection Standards

Because we partner with practices globally, our data protection practices adhere to international privacy frameworks:

• European Union & United Kingdom (GDPR / UK GDPR): We process data lawfully under legitimate interest and contractual necessity. EU/UK individuals hold rights to data access, rectification, erasure, and portability.
• United States: We comply with applicable state privacy acts (including CCPA/CPRA). We do not sell personal data under any circumstances.
• Canada (PIPEDA): Personal information is handled in accordance with the 10 Fair Information Principles.
• Australia (Privacy Act & APPs): We adhere to the 13 Australian Privacy Principles and Tax Practitioners Board (TPB) confidentiality codes.
• United Arab Emirates (Federal Decree-Law No. 45/2021): Data protection aligned with UAE federal standards and free-zone regulatory frameworks.

6Data Retention & Security Safeguards

All transmissions are protected with industry-standard TLS 1.3 encryption in transit and AES-256 encryption at rest. Access to client financial records is strictly restricted to assigned accounting personnel operating under multi-factor authentication (MFA) and granular role-based access control (RBAC).

Inquiry submissions are retained only as long as necessary to fulfill professional engagements or meet statutory accounting recordkeeping obligations.

7Your Privacy Rights

Depending on your jurisdiction, you have the right to request access to your personal information, request corrections or updates, request deletion, or withdraw consent. To exercise any of these rights, contact our Data Protection Officer at hello@nsicapitals.com.