Privacy policy
This policy explains what data we collect, why we collect it, and the rights you have over it.
Data controller
The data controller is [Company name], reachable at [contact email].
Data we collect
When you use the service we collect:
- account data: first and last name, email address, password (stored hashed);
- business data: company name, registration number, billing address, trade;
- the records you enter: clients, quotes, invoices, invoice lines and payment reminders;
- technical sign-in data, required to keep the service secure.
Purposes and legal bases
Data is processed to perform our contract with you (providing the invoicing service), to meet our legal obligations around invoicing and accounting, and to keep the service secure under our legitimate interest.
Hosting and retention
Data is hosted in France. It is kept for the whole duration of your subscription, then for [period] after the account is closed, to meet the legal retention requirements that apply to accounting records.
Sharing
Your data is never sold. It may be shared with the technical processors strictly required to run the service — hosting, email delivery and payment — who act on our instructions and are bound by confidentiality.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data. To exercise any of these, write to [contact email]. You may also lodge a complaint with your national supervisory authority, or with the French CNIL.