Privacy Policy

This is placeholder copy. The final Privacy Policy must be reviewed by a lawyer before the service is offered commercially.

• We store only the data needed to operate the service: accounts, companies, documents.
• Payment details are handled by Stripe; we never store card data.
• We do not sell personal data.

Processing agreement (DPA)

Where we process personal data on your behalf (as a processor for you as controller), a signed Data Processing Agreement is available on request and a standard template follows the European Commission's Standard Contractual Clauses — EC SCCs — and the Bulgarian supervisory authority's guidance at cpdp.bg.

Erasure vs statutory retention

You can request erasure of your personal data at any time, and we will honour it — except where Bulgarian statutory retention overrides the right to erasure. Accounting books and the documents behind them are subject to the retention periods of the Bulgarian Accountancy Act (Закон за счетоводството): books 10 years, payroll and insurance records 5 years, and intercompany, real-estate and longer-liability documents up to 15 years. Where retention applies, the data is kept solely for that legal purpose, locked from active use, and erased once the period expires.

Persons register — identifiers

The persons register (partners / counterparties) stores only what the accounting work requires. We deliberately do NOT collect Bulgarian personal identification numbers (ЕГН) unless a specific legal obligation requires them (e.g. a statutory reporting form). A free-text ЕГН field must never be added "just in case" — if a form ever needs it, that decision goes through a privacy review first.