Privacy Policy
Last updated: September 2026
1. Who We Are and How to Contact Us
FaturaPro is the data controller for the online invoicing service available at faturapro.app. The service is operated from the Netherlands. This policy explains what we collect, why we use it and what you can ask us to do with it. Privacy requests can be sent to support@faturapro.app.
2. Data We Collect
Account data includes your email address and any business details you add, such as a name, address, tax number and logo. Content data includes invoices, credit notes, quotes, clients, expenses, amounts and descriptions you enter. Ambassador data includes application details, tracking codes, aggregate activity, attributed accounts, eligible subscription payments, commission and payout records. We also record a small set of account-activation events, such as starting or creating an invoice, creating a client, quote or expense, and returning to the app on a later day. These events contain a timestamp and limited context such as the source screen or currency; they do not copy invoice text, client contact details or document contents. We also process support messages and limited technical data needed to operate, secure and improve the service. We do not ask for or store bank-login details, and we do not sell personal data.
3. Purposes and Legal Bases
We process account and document data to provide the service you request and perform our contract with you. We process limited security, support and product-activation data for our legitimate interests in protecting accounts, preventing abuse, diagnosing errors, understanding whether customers can reach the core invoicing workflow and improving reliability. We keep records where required by tax, accounting or other law. Optional analytics that require consent run only after you choose to allow them, and you may withdraw that choice.
4. Data Location and Security
Account, invoice and customer data handled by Supabase is stored in its European Union region in Ireland. Connections to the service are encrypted in transit. No internet service can promise absolute security, so keep your password private and retain any records your business is required to keep.
5. Payments
Stripe processes subscription payments, client card payments and ambassador payout onboarding where those features are used. FaturaPro does not store full card numbers or bank-login details. Client invoice payments settle through the business owner's connected Stripe account. We retain the identifiers and status data needed to connect those transactions to the correct account.
6. Support Assistant
Messages sent to the in-app support assistant are processed to answer the question and may be stored for support, security and service improvement. The assistant uses Anthropic as an AI-processing provider. Do not paste passwords, card numbers, private API keys or other sensitive credentials into chat. You can ask us to remove support-chat history associated with your account.
7. Cookies, Referral Attribution and Analytics
Strictly necessary storage keeps sessions and preferences working. A first-party referral code and anonymous click identifier may be kept for up to thirty days after someone follows a member or ambassador link. Ambassadors see aggregate counts rather than referred customers' names or email addresses. Minimal authenticated activation events are stored with the account in Supabase so we can measure whether onboarding works without storing document contents in analytics. Vercel Analytics measures product and page use. Microsoft Clarity is optional and loads only after analytics consent. We do not sell personal data or use advertising cookies.
8. Service Providers and International Transfers
Supabase provides authentication and database hosting; Vercel provides website hosting, serverless functions and analytics; Stripe processes subscription payments, connected client payments and ambassador payout onboarding; Resend delivers transactional email; Anthropic processes support-assistant messages; and Microsoft Clarity provides optional session analytics after consent. These providers receive only the data needed for their role. Some may process data outside the European Economic Area under their published terms and applicable transfer safeguards. We may also disclose limited information when law requires it.
9. Retention
Account data and documents are kept while the account is active. Referral records are kept for attribution, fraud prevention and commission administration. Payment, security or dispute records may be retained for the period required by law or needed to establish or defend claims. Other personal data is removed or de-identified when it is no longer needed for the purposes described here. You may request account deletion, subject to those limited retention duties.
10. Your GDPR Rights
Where the GDPR applies, you can request access, correction, deletion, portability or restriction, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. Requests are free unless the law permits otherwise, and we may need to verify your identity. You may complain to your national data-protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.
11. Automated Decisions
FaturaPro does not use personal data to make solely automated decisions that produce legal or similarly significant effects. Automated checks may be used to limit abuse, protect forms and attribute referrals, but material account or ambassador decisions can be reviewed by a person.
12. Children
The service is intended for businesses and professionals and is not directed at children under sixteen. We do not knowingly collect their personal data.
13. Changes
If this policy changes, we will update the date on this page. We will use email or an in-app notice when a change materially affects how account data is handled.
14. Contact
For privacy questions, rights requests or concerns, email support@faturapro.app.