Privacy policy (GDPR)

For account and billing data of Service users, TRI SOFTWARE SOLUTIONS SRL, Tax ID RO21768380, registered at Str. Constantin Dobrogeanu Gherea, Nr. 68, Bl. 1, Ap. 4, Municipiul Brașov, Jud. Brașov, CP 500003, acts as data controller.

For the data of your own clients, suppliers and documents that you upload or enter into the app (e.g. invoices, your clients' contact details), we act as processor, with you (the tenant company) as the controller. The terms of processing as a processor are detailed in the Data Processing Agreement (DPA).

Account data: name, email, password (stored encrypted), subscription billing details.

Technical data: IP address, access and security logs, session identifiers, essential cookies.

Data you enter as an app user (invoices, clients, suppliers, expenses) — processed as processor, per the DPA.

Providing the Service and managing the account — performance of a contract (Art. 6(1)(b) GDPR).

Billing the subscription and complying with tax obligations — legal obligation (Art. 6(1)(c) GDPR).

Improving security and preventing fraud — legitimate interest (Art. 6(1)(f) GDPR).

Marketing communications — only with your consent, revocable at any time (Art. 6(1)(a) GDPR).

Account data is kept for the duration of the contract and afterwards per legal tax/accounting archiving requirements (typically 10 years for financial-accounting documents). Technical security data is kept for a limited period, as needed for incident investigation.

You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your data, under the conditions set by law.

To exercise these rights, contact us at info@facturifirma.ro.

Data is primarily hosted within the European Union. Any transfer outside the EEA is made only to providers offering adequate safeguards (e.g. standard contractual clauses).

For any data protection request: info@facturifirma.ro.

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — anspdcp.ro — if you believe that processing of your data violates the GDPR.