1. Data Controller
The data controller is Lea. For any question regarding your data, contact us:
2. Data Collected
We collect the following categories of data:
Account Data
- First and last name
- Email address
- Password (encrypted)
- Company information (name, address, phone, logo)
Usage Data
- Proformas, quotes and invoices created
- Clients and products managed
- Action history
- Login logs (IP, browser, timestamp)
Payment Data
- Processed by Stripe - we do not store your banking details
- Transaction and subscription history
Technical Data
- Session cookies and preferences
- Performance and error data
3. Processing Purposes
Your data is used to:
- Provide and improve our services
- Manage your account and subscription
- Send you notifications related to your activity
- Ensure security and prevent fraud
- Meet our legal obligations
- Contact you for customer support
4. Legal Basis
- Contract performance: processing necessary to provide our services
- Legitimate interest: security, fraud prevention, service improvement
- Legal obligation: retention of accounting and tax data
- Consent: marketing communications (revocable at any time)
5. Data Sharing
We never sell your data. It may be shared with:
- Stripe - payment processing
- Hosting providers - secure data storage
- Email services - transactional notification delivery
- Competent authorities - if required by law
All our processors are bound by confidentiality agreements and provide sufficient data protection guarantees.
6. Retention Period
- Active account data: duration of subscription + 30 days after closure
- Accounting documents: 10 years (legal obligation)
- Login logs: 90 days
- Payment data: according to Stripe rules and tax obligations
7. Your Rights
In accordance with applicable regulations, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: export your data in a readable format
- Objection: object to certain processing
- Restriction: limit the use of your data
To exercise your rights, contact us. We will respond within 30 days.
8. Cookies
We use only the cookies strictly necessary for the service to function (authentication, session preferences). No advertising or third-party tracking cookies are used.
9. Security
We implement appropriate technical and organizational measures to protect your data: communication encryption (HTTPS/TLS), password hashing, restricted data access, regular backups, and security monitoring.
10. Changes
We may update this policy. In case of a substantial change, you will be notified by email at least 15 days before the new provisions take effect.