Privacy Policy

Last updated: April 2026

Who we are

This app is operated by Faturista. If you have any questions or requests about your data, contact us at .

What data we collect

When you use this app, we collect:

• Account information — your username and password (stored as a secure bcrypt hash, never in plain text)
• Invoice files — the PDF files you upload
• Extracted invoice data — supplier name, NIF, invoice date, totals, and VAT, as read from your invoices
• Basic usage data — which invoices you uploaded and when

We do not collect analytics, cookies, or any data unrelated to invoice processing.

How we use your data

Your data is used solely to provide the invoice scanning and tracking service. We do not sell, share, or use your data for advertising or any purpose beyond what is described here.

Third-party processing — OpenAI

To extract data from your invoice PDFs, we send the invoice images to OpenAI via their API. You should know:

• OpenAI receives the image content of your invoices
• OpenAI retains uploaded data for up to 30 days for abuse monitoring, after which it is deleted
• Your data is not used to train OpenAI's models
• OpenAI acts as a data processor on our behalf, under their API Data Processing Agreement and Standard Contractual Clauses covering EU data transfers

If you are uncomfortable with invoice images being processed by OpenAI, this app is not suitable for you at this time.

How long we keep your data

We keep your invoices and account data for as long as your account is active. If you ask us to delete your data, we will do so within 30 days.

Your rights

You have the right to:

• Know what data we hold about you
• Request a copy of your data
• Ask us to correct inaccurate data
• Ask us to delete your data entirely

To exercise any of these rights, contact us at .

Data security

Passwords are stored as bcrypt hashes. Railway infrastructure is used for file storage; if encryption at rest becomes a requirement before any commercial use, we will address it at that point.

Changes to this policy

If anything material changes — especially around third-party processors — we will notify you directly before the change takes effect.