Privacy Policy

Fakturia is operated by Individual Entrepreneur KULIKOVA DARIA IGORI, state registration number 273.1347809, tax identification number 40149986, Komitas Avenue 16, apt. 88, Arabkir, Yerevan 0012, Republic of Armenia. Contact for privacy matters: support@fakturia.cloud.

For your account and contact data we are the controller. For the content of the invoices and documents you send and receive (which may include personal data of your contacts), you are the controller and we act as your processor under our Data Processing Agreement; the certified delivery provider eFaktura s. r. o. acts as our sub-processor.

• Account data: your email address, optionally your name and phone number, your language and notification settings, and a securely hashed password (we never store the password itself).
• Company data: company name, registration and tax numbers, address and Peppol participant identifier.
• Documents: invoices, credit notes and attachments you create, send or receive, including the names, addresses and identifiers of your business contacts that appear in them, and their delivery status.
• Technical data: session records (browser type, IP address, sign-in time) and server logs needed to operate and secure the Service.
• Emails: a log of the service emails we sent you (type, time, status).
• Support correspondence: messages you send us.
• Payment data: when paid plans are active, card payments are processed by our payment provider. We receive only the payment status and basic transaction details, not your full card number.

• To provide the Service you signed up for (performance of contract).
• To deliver your e-invoices over Peppol and transmit the data required by law to the Slovak Financial Administration through the certified delivery provider (performance of contract and legal obligations).
• To send service and security emails (performance of contract, legitimate interest).
• To bill paid plans and keep accounting records (legal obligation).
• To keep the Service secure and prevent misuse (legitimate interest).
• To answer your support requests (legitimate interest).

We do not sell personal data and do not use it for advertising.

We use only strictly necessary cookies — see the Cookie Policy. We do not use analytics, advertising or tracking cookies, so no cookie consent is required.

The current list of sub-processors, with their role and location, is published on the Sub-processors page. In short: eFaktura s. r. o. (Slovakia) for Peppol delivery and reporting, Hostinger (server in France, EU) for hosting, database and email, and Cloudflare for DNS and network protection. We also disclose data to public authorities where the law requires it.

The application and its database run on a server in the European Union (France). Peppol delivery data is processed in Slovakia. The operator is established in Armenia, which means data is accessed from outside the EU for operating and supporting the Service; such access relies on the EU Standard Contractual Clauses. Cloudflare may process network traffic globally under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

• Account and company data: while your account is active.
• Documents: while your account is active. After the account is closed you can request an export within 30 days, after which we delete your content unless the law requires us to keep it.
• Session records: until they expire (14 days) or you sign out.
• Email log and server logs: up to 12 months, for security and support.
• Billing records: as long as accounting law requires.

Statutory archiving of your accounting and tax documents remains your responsibility.

You can ask us for access to, correction, deletion or a copy of your personal data, or object to or restrict its processing, by emailing support@fakturia.cloud. You can update your profile and notification settings yourself in your account. We reply within one month. If you are in the European Union you may also complain to your local data protection authority — in Slovakia, the Úrad na ochranu osobných údajov SR.

Connections are encrypted (HTTPS), passwords are stored only as salted scrypt hashes, session and email tokens are stored only as hashes, and access to data is limited to what is needed to run the Service.

We may update this policy. The date at the top shows the latest version; material changes are announced by email.