Privacy Notice (draft)
Draft of 2026-11-09-draft, under review by a lawyer. It describes how [Юридическо наименование на оператора / operator's legal name] ("we") processes personal data when you use PlatiMe.
Who we are and in what role
For your account data (email, sign-in, consents, security records) we are the controller.
For data your company enters about its customers (company names, EIK, invoices, amounts, dates) we are a processor acting for your company, which is the controller. This is governed by a Data Processing Agreement (GDPR Art. 28).
Money Meter: your file stays with you
The file you drop into the Money Meter is read and analysed only in your browser. It is not sent to us. If you choose “Save to the cloud” and confirm inside the app, only the resulting rows (number, customer, EIK, dates, amounts, currency) are saved to your company's account.
What data we process
Account: work email, password (stored only as a cryptographic hash by the authentication provider), language, consent dates.
Company: name, EIK, VAT number, members and their roles.
Receivables: invoices and customers you enter or import. Business data only; we do not process data about consumers.
Security: an action log (who, when, what) that cannot be edited.
Purposes and legal bases
Providing the service under contract (GDPR Art. 6(1)(b)); security and abuse prevention (legitimate interest, (f)); legal obligations ((c)).
Where data is stored
Database and authentication: Supabase, Frankfurt region (EU). Website delivery: Cloudflare. They are our sub-processors. The operator is established outside the EU; transfers are covered by standard contractual clauses (see the drafts under review).
How long
Account and company data: until you delete them, plus up to 30 days in backups.
Action log and consent records: kept as evidence, but when a company or account is deleted they are unlinked from it and can never be edited.
Cookies and tracking
We use no tracking or advertising cookies and load nothing from third parties. Your browser stores only your sign-in session and your theme choice.
Your rights
You can access, correct, erase, restrict, port and object. You can complain to the Bulgarian Commission for Personal Data Protection (CPDP). For requests write to support@platimebg.com.