Privacy policy

1. Who processes the data

The controller is the company that issues the invoice for the service. Its full identification details - name, tax code, trade register number and registered office - are on the contact page and on the invoice received together with the report. Contact for any data protection matter: the dedicated form.

2. What data we process

Category	What it contains and where it comes from
The trial-balance file	The PDF you upload. It may contain the names of the sub-ledger accounts, hence company names and, in some charts of accounts, people's names.
Aggregated accounting values	Balances and turnovers per account, class totals, the computed indicators. Figures, without names.
Entity identification	The name and CUI read from the trial-balance header, plus the period.
Email address	You enter it at the order. It is the only way the report and the invoice can reach you, because there is no account.
Billing details	The name and CUI you provide for the invoice, optional. If you request the invoice as an individual: the first name, last name and, optionally, address, town, county and CNP. The CNP is kept encrypted until delivery and then deleted from the order; it remains only on the invoice, where the law requires it to remain.
IP address	Retained at upload and at form submission, solely to limit abuse.
Proof of consent	The boxes ticked, the exact version of the accepted text, the moment, the IP address and the browser identifier.
Card details	They never reach us. Payment is made in Stripe; we only receive the confirmation that payment was made.

3. On what basis

• Performance of the contract (art. 6(1)(b)): reading the trial balance, generating the report, delivering it by email.
• Legal obligation (art. 6(1)(c)): issuing and keeping the invoice, in accordance with tax and accounting law.
• Legitimate interest (art. 6(1)(f)): limiting abuse of the service and keeping proof of delivery.

The declaration that you have the right to request the analysis for the entity in the trial balance is not a legal basis for processing, but a condition you undertake towards us. Without it we do not process.

4. How long we keep each thing

What	How long
The uploaded PDF file	Until the end of the request in which it was read. It is not stored.
The names of the sub-ledger accounts	Deleted right after the indicators are computed, before payment — with a single exception, below.
The names of the 10 largest customers and 10 largest suppliers (they appear in the report, Details section)	At most 72 hours. After delivery, the window shortens automatically.
The aggregated values of the analysis	At most 72 hours. After delivery, the window shortens automatically.
The delivered report PDF	7 days, for re-download.
If you don't pay	Everything is deleted, automatically, after 26 hours.
The order, the invoice and the SHA-256 fingerprint	For the period required by tax and accounting law.
Proof of consent	For as long as it may be needed to demonstrate compliance, per art. 5(2).

The PDF file is deleted within the same request in which it was read, whether you pay or not: we do not keep it even until your decision. If you do not pay, the figures derived from it are deleted automatically after 26 hours, by the same process that runs every hour and also cleans up paid orders. We keep nothing extra for an unpaid order and we do not write to you to ask why you did not pay.

The SHA-256 fingerprint is a checksum, not content: the report cannot be reconstructed from it. It remains so that we can prove what we delivered to you, without keeping what was inside.

5. Who the data reaches

• Stripe - payment processing. It receives the email address and the amount; we receive no card data.
• The email provider - delivery of the report and the invoice.
• The hosting provider - the infrastructure the service runs on.

We do not sell, rent or exchange data with anyone else. We do not use your data to train models.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. You can exercise them from the deletion and anonymisation form. We respond within one month of receipt at the latest, the maximum term set by art. 12(3).

In practice the data deletes itself much earlier; the form exists so that you do not depend on that.

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

7. Security measures

• Traffic is entirely encrypted (HTTPS).
• The uploaded file is checked before reading: documents containing scripts, embedded files or automatic actions are rejected.
• Reading is done in an isolated process, with time and memory limits.
• On request, the delivered PDF can be encrypted with a password chosen by you, which we do not keep after delivery.
• Deletion does not depend on anyone's intervention: it runs automatically, periodically.

8. Cookies and tracking

The site sets no cookie, loads no resources from other domains and uses no Google Analytics or other external tool. The chosen language lives in the page address, not in a cookie. There is no consent banner because there is nothing to consent to.

We do count visits, to know how many people find us, but we do it on the server and without identifying you. For each page opened we record: the date, the page address, the domain you came from if any, the country and a string computed from your IP address, browser and the current day. The IP address is not kept. That string cannot be turned back into an address, and tomorrow the same person produces a different string, so we cannot track anyone from one day to the next and we cannot link visits to an order.

A single cookie exists in the whole service: the session cookie of our admin panel, on a separate subdomain that no visitor reaches. It is strictly necessary for authentication and has nothing to do with you.