Privacy policy

The controller of personal data is Jiří Zahrádka, company ID (IČO) 29695759, a sole trader registered under the Czech Trade Licensing Act, operator of the Fakturo service (fakturo.online), Czech Republic.

Contact email: support@fakturo.online

When you use Fakturo, we process these categories of personal data:

• –Registration data: name, email address, password (stored as a hash)
• –Billing data: company ID, VAT ID, address, bank details
• –Your clients’ data: name, address, company ID, email (entered by you)
• –Transaction data: invoices, payments, history records
• –Technical data: IP address, browser type, cookies, logs

We process the data about your clients and suppliers that you enter into the app only on your behalf. You are its controller and we are the processor. The terms of this processing are set out in Article 9 of the terms of service.

We process personal data on these legal grounds:

• –Performance of a contract (Art. 6(1)(b) GDPR) — running your account and providing the service
• –Legitimate interest (Art. 6(1)(f) GDPR) — security, fraud prevention, technical operation
• –Compliance with a legal obligation (Art. 6(1)(c) GDPR) — tax and accounting regulations
• –Consent (Art. 6(1)(a) GDPR) — Google Analytics cookies, marketing communication

• –User account (email, name, billing data): for as long as the account exists and 1 year after it is closed, in case of possible claims
• –Data you create in the app (invoices, clients, expenses, receipts): for as long as the account exists. We delete it within 30 days after the account is closed. Keeping issued invoices for the period required by law is your obligation as their issuer, so please export them before closing your account.
• –Records of subscription payments: for the period required by tax and accounting regulations
• –Technical logs: 90 days
• –Consent to analytics cookies: 6 months, then we ask again
• –Marketing consents: until withdrawn

We share your data only with trusted processors, and only to the extent necessary:

• –Clerk Inc. — user authentication (USA, EU standard contractual clauses)
• –Supabase Inc. — database and storage (EU region — Frankfurt)
• –Stripe Inc. — payment processing (USA, EU standard contractual clauses)
• –Vercel Inc. — web application hosting (USA, EU standard contractual clauses)
• –Resend Inc. — sending emails and receiving receipts sent by email (USA, EU standard contractual clauses)
• –Google Ireland Ltd. (Google Analytics) — website traffic measurement, only with your consent (EU, transfers to the USA based on EU standard contractual clauses)

Only Supabase, Vercel and Resend (sending invoices and reminders) work with your clients’ data. We will notify you of any planned change of processors at least 14 days in advance.

We do not sell data to third parties or use it for advertising.

As a data subject, you have these rights:

• –Right of access to personal data (Art. 15 GDPR)
• –Right to rectification of inaccurate data (Art. 16 GDPR)
• –Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
• –Right to restriction of processing (Art. 18 GDPR)
• –Right to data portability (Art. 20 GDPR) — export in PDF or CSV
• –Right to object (Art. 21 GDPR)
• –Right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz) or the supervisory authority in your country

Send requests to exercise your rights to: support@fakturo.online. We reply within 30 days.

• –Essential cookies — sign-in (Clerk) and storing your cookie and country choice. The app does not work without them; they do not require consent.
• –Vercel Web Analytics traffic measurement — uses no cookies and stores nothing on your device; it works only with anonymous aggregated data.
• –Google Analytics cookies (Google Ireland Ltd.) — only run with your consent. They help us understand how many people visit the website and where they come from. Consent is valid for 6 months.

You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer. You can also manage cookies in your browser settings.

We apply technical and organisational measures to protect your data:

• –Encryption of data in transit (HTTPS/TLS)
• –Encryption of data in the database (AES-256)
• –Separation of each user’s data directly in the database
• –Sign-in verification with a code sent by email
• –Regular encrypted database backups
• –Least-privilege access

We will inform you of material changes by email and a notice in the app at least 14 days in advance. The current version is always available on this page.

For any questions about the processing of personal data, contact us:

• –Email: support@fakturo.online
• –Form: fakturo.online/en/kontakt