Privacy policy
Application Invoicing is a web application for managing invoices, client access and related documents. This policy describes what data the application processes, why it is processed, and how a user can request restriction or deletion of processing.
1. Who operates the application
The operator of the Invoicing application is Richard Hlušička. Questions regarding personal-data processing, security or account disconnection can be sent to richard.hlusicka@gmail.com.
2. What is the purpose of the application
Invoicing is used to manage company and client accounts, issued invoices, documents and payments, and to automatically import documents from email and other sources that the user actively configures in the application.
3. What data may be processed
- user first and last name,
- email address,
- roles and permissions in the application,
- information required for sign-in and account security.
- company, customer and supplier data,
- invoices, payment data and imported documents,
- operational logs and technical information required for secure operation of the application.
4. Access to a Google account and Gmail
If a user explicitly connects a Google account, the application may access Gmail solely to import emails and attachments related to invoicing and accounting records. This access is not used for advertising, profiling or selling data to third parties.
- This may include the account email address, email metadata, selected message content and attachments.
- The data is used only to load documents, match them and display them in the Invoicing application.
- Access to the Google account can be disconnected at any time.
5. How we use data
- to operate the application and authenticate users,
- to manage invoices and client/company access,
- to import and process documents and payment records,
- for security and audit purposes, such as recording important actions in the system.
6. Data storage and sharing
Data is stored only to the extent necessary to operate the application and provide the features used by the user. Data is not sold to third parties. Sharing may occur only when necessary for technical operation of the service, to meet a legal obligation, or when requested by the user.
7. Retention period
Data is retained for the duration of the user account or for as long as retention is necessary for application operation, security, and legal or accounting obligations. After use of the service ends, the user may request account disconnection and deletion of stored data unless further retention is required by law.
8. Security
The application is protected by authentication mechanisms, permission controls and other technical and organizational measures appropriate to the service. Data access is restricted according to the user role.
9. User rights
A user may request, in particular:
- information about what data is processed about them,
- correction of inaccurate data,
- restriction of processing or disconnection of a Google account,
- deletion of data when further retention is not necessary.
10. Cookies and local settings
Invoicing uses essential cookies for secure sign-in, session protection and core application functionality. These cookies are technically necessary; without them the signed-in part of the application cannot be used securely.
- the PHP session cookie maintains a secure signed-in session,
- a long-lived remember-sign-in cookie is created only when the user explicitly selects “Remember sign-in”,
- appearance settings and some local device preferences may be stored in browser storage,
- Invoicing currently does not use analytics, advertising or marketing cookies.
11. Contact
Send all questions about this policy or data processing to richard.hlusicka@gmail.com.