Privacy Policy

Introduction

Fakturalista ("we", "our") collects and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR). This policy describes what data we collect, how we use it, and your rights as a data subject.

Data Controller

Yassine AIT TOUIJAR, operating as an auto-entrepreneur (sole trader). Email: contact@fakturalista.com.

Data We Collect

We collect: (1) Account information — first name, last name, email address, company name, business address, tax identification number; (2) Invoice data — client details, products, amounts, payment history; (3) Technical data — IP address, browser type, device information, and pages visited (via Google Analytics); (4) Payment data — processed directly by Stripe, not stored on our servers.

Purpose of Processing

We use your data to: provide the Fakturalista service and manage your subscription; send transactional emails (invoices, confirmations, notifications); improve the service through aggregated analytics; and fulfil our legal obligations.

Legal Basis

Our processing is based on: performance of the contract (subscription agreement); your consent (for analytics cookies); legal obligation (accounting and invoicing compliance); and legitimate interest (fraud prevention, service security).

Data Retention

Account data is retained for the duration of your subscription plus three years after account deletion. Invoice data is retained for ten years as required by applicable accounting law. Analytics data is retained for up to 26 months by Google Analytics.

Third-Party Processors

Stripe, Inc. (225 Bush St, San Francisco, CA 94104, USA) processes payment card data on our behalf. Stripe is PCI DSS Level 1 certified. See Stripe's privacy policy at stripe.com/privacy. Google LLC processes anonymised usage data via Google Analytics. See Google's privacy policy at policies.google.com/privacy.

Your Rights

Under GDPR, you have the following rights:

• Right of access — obtain a copy of all personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on our legitimate interests.
• Right to restriction — request that processing be temporarily suspended.

To exercise any of these rights, contact us at contact@fakturalista.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

International Transfers

Some data may be transferred to the United States (Stripe, Google Analytics). These transfers are carried out under Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

Changes to This Policy

We may update this policy at any time. Changes will be published on this page with an updated date. We recommend checking this page periodically.

Contact

For any data protection question: contact@fakturalista.com.